This vulnerability involves improper neutralization of input during web page generation (CWE-79) in Nozomi Networks Guardian. Specifically, the Schedule Restore Archive feature does not adequately validate input parameters, allowing stored HTML injection by authenticated users with administrative privileges. The malicious HTML payloads can be rendered in other users' browsers when they view the affected schedule, which may facilitate phishing or open redirect attacks. Existing controls such as partial input validation and Content Security Policy reduce the risk of full XSS exploitation and direct data leakage. No patch or official remediation level has been disclosed, and the product is not a cloud service.

An authenticated administrator can inject malicious HTML into scheduled restore archives, which is then rendered in other users' browsers. This can lead to phishing attacks or open redirects. However, the risk of full cross-site scripting exploitation and direct information disclosure is limited by existing input validation and Content Security Policy. There are no known exploits in the wild. The impact is considered medium severity with a CVSS score of 4.8.

No official patch or remediation has been announced by the vendor. Since the vulnerability requires administrative privileges and partial mitigations are in place, organizations should monitor for updates from Nozomi Networks for an official fix. Until then, limit administrative access to trusted personnel and consider reviewing or restricting the use of the Schedule Restore Archive functionality to reduce exposure.