CVE-2019-10177

CVE-2019-10177 is a stored cross-site scripting (XSS) vulnerability affecting the PDF export component of CloudForms versions 5.9 and 5.10, stemming from improper sanitization of user input. An attacker with low privileges can exploit this by editing compute settings, leading to malicious code execution and potential theft of anti-CSRF tokens from higher-privileged users. This vulnerability has a CVSS score of 6.5 (Medium) with a network attack vector and low attack complexity, requiring user interaction. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.