CVE-2024-4546

The Custom Post Type Attachment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pdfattachment' shortcode in all versions up to, and including, 3.4.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

CVE-2024-4546 Custom Post Type Attachment <= 3.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via pdf_attachment Shortcode

The Custom Post Type Attachment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pdfattachment' shortcode in all versions up to, and including, 3.4.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

CVE-2024-4546

CVE-2024-4546 affects the WordPress plugin Custom Post Type Attachment . It is vulnerable to Stored Cross-Site Scripting via the plugin’s pdf_attachment shortcode in all versions up to and including 3.4.5 due to insufficient input sanitization and output escaping on user-supplied attributes. The ...

CVE-2024-4546 Custom Post Type Attachment <= 3.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via pdf_attachment Shortcode

The Custom Post Type Attachment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pdfattachment' shortcode in all versions up to, and including, 3.4.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

WordPress Custom Post Type Attachment Plugin <= 3.4.5 is vulnerable to Cross Site Scripting (XSS)

Software Custom Post Type Attachment Type Plugin Vulnerable versions = 3.4.5 Fixed in 3.4.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4546 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3e22d0f6f243 Credits Francesco...