CVE-2025-64280 is a critical SQL Injection vulnerability in CentralSquare Community Development version 19.5.7. The flaw allows unauthenticated attackers to inject malicious SQL commands via the permit_no field, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system.