Security News CISA Flags Craft CMS Vulnerability CVE-2025-23209 Amid Active Attacks TheHackerNews Daniel Bender Feb 21, 2025 CISA adds CVE-2025-23209 to its KEV list as Craft CMS faces active exploitation, urging agencies to patch by March 13, 2025.