Security News CISA flags Craft CMS code injection flaw as exploited in attacks BleepingComputer Daniel Bender Feb 21, 2025 The U.S. Cybersecurity & Infrastructure Security Agency (CISA) warns that a Craft CMS remote code execution flaw is being exploited in attacks.