Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 08:01:00 +0000 cnvd-2019-22838 https://cve.radiocsirt.org/vuln/cnvd-2019-22838 cnvd-2019-22838 https://cve.radiocsirt.org/vuln/cnvd-2019-22838 EUVD-2026-53409 https://cve.radiocsirt.org/vuln/euvd-2026-53409 EUVD-2026-53409 https://cve.radiocsirt.org/vuln/euvd-2026-53409 fkie_cve-2019-10177 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10177 <p>A stored cross-site scripting (XSS) vulnerability was found in the PDF export component of CloudForms, versions 5.9 and 5.10, due to user input is not properly sanitized. An attacker with least privilege to edit compute is able to execute a XSS attack against other users, which could lead to malicious code execution and extraction of the anti-CSRF token of higher privileged users.</p> <p>A stored cross-site scripting (XSS) vulnerability was found in the PDF export component of CloudForms, versions 5.9 and 5.10, due to user input is not properly sanitized. An attacker with least privilege to edit compute is able to execute a XSS attack against other users, which could lead to malicious code execution and extraction of the anti-CSRF token of higher privileged users.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10177 GHSA-gcg5-r76p-h8xr https://cve.radiocsirt.org/vuln/ghsa-gcg5-r76p-h8xr <p>A stored cross-site scripting (XSS) vulnerability was found in the PDF export component of CloudForms, versions 5.9 and 5.10, due to user input is not properly sanitized. An attacker with least privilege to edit compute is able to execute a XSS attack against other users, which could lead to malicious code execution and extraction of the anti-CSRF token of higher privileged users.</p> <p>A stored cross-site scripting (XSS) vulnerability was found in the PDF export component of CloudForms, versions 5.9 and 5.10, due to user input is not properly sanitized. An attacker with least privilege to edit compute is able to execute a XSS attack against other users, which could lead to malicious code execution and extraction of the anti-CSRF token of higher privileged users.</p> https://cve.radiocsirt.org/vuln/ghsa-gcg5-r76p-h8xr gsd-2019-10177 https://cve.radiocsirt.org/vuln/gsd-2019-10177 gsd-2019-10177 https://cve.radiocsirt.org/vuln/gsd-2019-10177