Cross-site Scripting (XSS)

github.com/grafana/grafana is vulnerable to cross-site scripting XSS attacks. The alertSrv function accepts html in the message alerts, allowing a malicious user to inject and execute arbitrary script...