This vulnerability arises from improper validation of an input parameter in the Smart Polling functionality of Nozomi Networks Guardian. An authenticated user with limited privileges can push malicious remote strategies containing HTML tags. When these are viewed by others, the HTML executes in the victim's browser, enabling phishing and possibly open redirect attacks. Existing input validation and Content Security Policy prevent full XSS exploitation and direct information disclosure. No known exploits are reported in the wild, and no official remediation or patch has been disclosed.

An attacker with limited authenticated access can inject HTML content that executes in the browsers of other users viewing the affected remote strategies. This can facilitate phishing attacks and open redirect scenarios. However, the risk of full cross-site scripting exploitation and direct data leakage is reduced by existing input validation and Content Security Policy measures.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the Smart Polling feature to trusted users only and monitor for suspicious activity related to remote strategy synchronization.