This vulnerability involves improper neutralization of input during web page generation in the spamBlocker module of WatchGuard Fireware OS, allowing stored XSS attacks. Exploitation requires an authenticated administrator session on a locally managed Firebox device. The affected versions are Fireware OS 12.0 through 12.11.1. No known exploits are reported in the wild, and no patch or vendor advisory detailing remediation is currently available.

An attacker with authenticated administrator access to a locally managed Firebox can exploit this stored XSS vulnerability to execute arbitrary scripts in the context of the administrator's browser session. This could potentially lead to session hijacking or other actions within the administrative interface. However, exploitation requires high privileges and local management access, limiting the scope of impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict administrative access to trusted personnel and networks, and monitor for suspicious activity related to the spamBlocker module. No official fix or temporary mitigation is currently documented.