Paloma

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Paloma records in CISA KEV

No Paloma vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2024-36294 CVE-2024-54205 · GHSA-3p7v-5rxq-8fw3

WordPress Paloma Widget plugin <= 1.14 - CSRF to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Paloma Paloma Widget postman-widget allows Cross Site Request Forgery.This issue affects Paloma Widget: from n/a through <= 1.14.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00168 Published 2024-12-06 No fix listed CWE-352

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0