Medium
CVSS: 6.1
Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields.
Critical
CVSS: 9.8
An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials.
Critical
CVSS: 9.8
A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permit_no field.