This vulnerability involves improper neutralization of input during web page generation (CWE-79) in the Credentials Manager functionality of Nozomi Networks Guardian. An authenticated user with administrative privileges can insert HTML tags into an identity field. When another user attempts to delete this identity, the injected HTML is rendered in their browser, which may facilitate phishing or open redirect attacks. However, the existing input validation and Content Security Policy reduce the risk by preventing full XSS exploitation and direct data disclosure. The vulnerability affects version 0 of the product, with no known patch or remediation level provided.

An attacker with administrative access can inject HTML that executes in the browser of users deleting the affected identity. This can lead to phishing attacks or open redirects, potentially deceiving users or redirecting them to malicious sites. Full cross-site scripting exploitation and direct information disclosure are mitigated by existing controls, limiting the severity to medium.

No official patch or remediation guidance is currently available. Users should monitor vendor advisories for updates. Given the vulnerability requires administrative privileges and user interaction, limiting administrative access and exercising caution when deleting identities may reduce risk until a fix is released.