This vulnerability involves improper neutralization of input during web page generation (CWE-79) in Nozomi Networks Guardian. Specifically, the Alerted Nodes Dashboard does not sufficiently validate an input parameter, allowing stored HTML injection via node label edits by authenticated users with required privileges. When alerts for the compromised node are displayed, the injected HTML can execute in the browser of users interacting with the dashboard. Despite this, the system's input validation and Content Security Policy prevent full XSS exploitation and direct information disclosure. The CVSS 4.0 base score is 2.1, reflecting low impact and complexity.

An attacker with authenticated access and appropriate privileges can inject HTML into node labels, which may be rendered in other users' browsers when viewing alerts. This can facilitate phishing and open redirect attacks. However, the vulnerability does not allow full cross-site scripting exploitation or direct information disclosure due to existing mitigations. There are no known active exploits in the wild.

No official patch or fix information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict privileges to trusted users to reduce risk. The existing input validation and Content Security Policy provide partial mitigation against full exploitation.