Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2023-32790

XSS on NXLog Manager

Description

Cross-Site Scripting (XSS) vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to inject a malicious JavaScript payload into the 'Full Name' field during a user edit, due to improper sanitization of the input parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NXLog NXLog Manager

Default version status: unaffected

  • 5.6.5633affected

References