CVE-2025-64281

CriticalCVSS 9.8

Published: 12/11/2025(UTC)Updated: 05/11/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.47%

41th percentile - higher than 41% of all known CVEs

Summary

CentralSquare Community Development version 19.5.7 has an Authentication Bypass vulnerability that allows attackers to access the admin panel without admin credentials.

Risk Assessment

Attackers can gain control of the admin panel, potentially leading to unauthorized system changes and data compromise.

Recommendation

Upgrade to a patched version immediately and implement additional authentication mechanisms.

Other vulnerabilities in CentralSquare Community Development

See all

CVE-2025-64280Critical
CentralSquare Community Development version 19.5.7 has a SQL Injection vulnerability that allows attackers to inject SQL via the permit_no field.
CVE-2025-59491Medium
Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields.

Original NVD description (English source)

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS