This vulnerability involves improper neutralization of input during web page generation (CWE-79) in Nozomi Networks Guardian. Specifically, an authenticated user with administrative privileges can inject HTML tags into a username. When another user attempts to delete a group containing this malicious user, the injected HTML is rendered in the victim's browser. Although this can enable phishing and open redirect attacks, the existing input validation and Content Security Policy reduce the risk of full cross-site scripting exploitation and direct information disclosure. There is no vendor advisory or patch currently available, and the affected version is indicated as '=0'.

The vulnerability allows an authenticated administrator to inject HTML that is rendered in other users' browsers during group deletion actions. This can lead to phishing and open redirect attacks. However, the impact is limited by existing input validation and Content Security Policy, which prevent full XSS exploitation and direct information disclosure. The CVSS score of 4.8 reflects a medium severity level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit administrative user access to trusted personnel and monitor for suspicious user creation activities involving HTML content in usernames. No direct patch or official remediation has been published by the vendor at this time.