TI-2025-21836 CVE-2025-30561 · GHSA-wpr8-w3v4-h4fxWordPress CAS Maestro plugin <= 1.1.3 - CSRF to Stored XSS vulnerabilityPriority LOW 31Cross-Site Request Forgery (CSRF) vulnerability in Henrique Mouta CAS Maestro cas-maestro allows Stored XSS.This issue affects CAS Maestro: from n/a through <= 1.1.3.CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00193 · Published 2025-03-24 · No fix listed CWE-352