+ Request intel workspace

CVE

CVE-2025-23209

P2

Craft CMS Code Injection Vulnerability

Craft CMS · Craft CMS

Date added (CISA)

2025-02-20

Remediation due

2025-03-13

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Related

Nothing linked yet

No threat actor or pipeline report has been cross-referenced against this CVE yet.

Source: NVD ↗ · CISA KEV Catalog ↗