CISA Alerts on Craft CMS Vulnerability CVE-2025-23209 Amid Ongoing Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has escalated attention to a critical vulnerability affecting the Craft content management system (CMS) by incorporating it into its Known Exploited Vulnerabilities (KEV) catalog. This action is prompted by confirmed instances of…