This vulnerability involves improper neutralization of input during web page generation (CWE-79) in the Smart Polling feature of Nozomi Networks Guardian. An authenticated user with limited privileges can push malicious remote strategies containing HTML tags via synchronization. When these strategies are viewed by other users, the injected HTML executes in their browsers, enabling phishing and possibly open redirect attacks. Existing input validation and Content Security Policy limit the impact by preventing full XSS exploitation and direct information disclosure. There is no vendor advisory indicating a patch or fix at this time.

An attacker with limited authenticated access can inject malicious HTML into remote strategies that other users view, potentially enabling phishing and open redirect attacks. The vulnerability does not allow full cross-site scripting exploitation or direct information disclosure due to existing mitigations. This limits the severity to medium impact, primarily affecting user trust and potentially redirecting users to malicious sites.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the Smart Polling functionality to trusted users only and educate users about the risk of phishing and suspicious redirects originating from this feature. Monitor vendor communications for updates on patches or official mitigations.