This vulnerability involves improper neutralization of input during web page generation (CWE-79) in Nozomi Networks Guardian. Specifically, the Schedule Restore Archive functionality does not properly validate an input parameter, allowing an authenticated user with administrative privileges to define a restore schedule containing malicious HTML tags. When other users view the affected schedule, the injected HTML executes in their browsers. Despite this, the impact is limited because existing input validation and Content Security Policy configurations prevent full XSS exploitation and direct information disclosure.

An attacker with administrative privileges can inject malicious HTML into restore schedules, which may be rendered by other users' browsers. This can facilitate phishing and potentially open redirect attacks. However, the vulnerability does not allow full cross-site scripting exploitation or direct information disclosure due to existing mitigations in input validation and Content Security Policy. There are no known exploits in the wild.

No official patch or remediation has been disclosed by the vendor. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit administrative access to trusted users and monitor for suspicious activity related to restore schedules.