Security News CISA Flags Craft CMS Vulnerability CVE-2025-23209 Amid Active Attacks TheHackerNews Daniel Bender 21 Feb 2025 CISA adds CVE-2025-23209 to its KEV list as Craft CMS faces active exploitation, urging agencies to patch by March 13, 2025.