CVE-2025-64280: Centralsquare Community Development

Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permit_no field.

Affected products

• Centralsquare Community Development: version 19.5.7 only

Published 2025-11-12. Last modified 2026-06-17.