WordPress Paloma Widget plugin <= 1.14 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin Paloma Widget versions = 1.14...