WordPress Custom Post Type Attachment plugin <= 3.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via pdf_attachment Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via pdfattachment Shortcode vulnerability discovered by Francesco Carlucci in WordPress Plugin Custom Post Type Attachment versions = 3.4.5...