CVE-2024-4546 | Custom Post Type Attachment Plugin up to 3.4.5 on WordPress Shortcode pdf_attachment cross site scripting

A vulnerability was found in Custom Post Type Attachment Plugin up to 3.4.5 on WordPress. It has been declared as problematic. This vulnerability affects the function pdf_attachment of the component Shortcode Handler. The manipulation leads to cross site scripting.

This vulnerability was named CVE-2024-4546. The attack can be initiated remotely. There is no exploit available.