This vulnerability involves improper neutralization of input during web page generation (CWE-79) in the Credentials Manager functionality of Nozomi Networks Guardian. An authenticated user with administrative privileges can insert malicious HTML tags into an identity record. When a victim user attempts to delete the affected identity, the injected HTML executes in their browser context. Although the vulnerability allows some phishing and open redirect attack vectors, full XSS exploitation and direct data leaks are mitigated by existing input validation and Content Security Policy. No official fix or patch has been published as of the data provided.

An attacker with administrative access can inject malicious HTML that executes in the browser of users deleting the affected identity, enabling phishing and possibly open redirect attacks. However, the risk is limited as full cross-site scripting exploitation and direct information disclosure are prevented by existing controls. The vulnerability requires authenticated administrative privileges and user interaction to trigger.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict administrative access to trusted users only and exercise caution when deleting identities. Existing input validation and Content Security Policy provide partial mitigation.