<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: nxlog manager</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2023-32792: Cross-Site Request Forgery (CSRF) vulnerability in NXLog Manager 5.6.5633 version</title><link>https://patchthecve.com/cve/CVE-2023-32792.html</link><guid>https://patchthecve.com/cve/CVE-2023-32792.html</guid><pubDate>Wed, 17 Jun 2026 05:59:35 +0000</pubDate><description>MEDIUM 6.5: Cross-Site Request Forgery (CSRF) vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to eliminate roles within the platform by sending a specifically crafted query to the server. The vulnerability is based on the absence of proper validation of the origin of incom</description></item><item><title>CVE-2023-32791: Cross-Site Request Forgery (CSRF) vulnerability in NXLog Manager 5.6.5633 version</title><link>https://patchthecve.com/cve/CVE-2023-32791.html</link><guid>https://patchthecve.com/cve/CVE-2023-32791.html</guid><pubDate>Wed, 17 Jun 2026 05:59:35 +0000</pubDate><description>MEDIUM 6.5: Cross-Site Request Forgery (CSRF) vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to manipulate and delete user accounts within the platform by sending a specifically crafted query to the server. The vulnerability is based on the lack of proper validation of th</description></item><item><title>CVE-2023-32790: Cross-Site Scripting (XSS) vulnerability in NXLog Manager 5.6.5633 version</title><link>https://patchthecve.com/cve/CVE-2023-32790.html</link><guid>https://patchthecve.com/cve/CVE-2023-32790.html</guid><pubDate>Wed, 17 Jun 2026 05:59:35 +0000</pubDate><description>MEDIUM 4.6: Cross-Site Scripting (XSS) vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to inject a malicious JavaScript payload into the &#x27;Full Name&#x27; field during a user edit, due to improper sanitization of the input parameter.</description></item></channel></rss>