WS-2019-0218

graylog-web-interface all versions are vulnerable to XSS when it fails to escape output on the TypeAhead and QueryInput components, which may allow attackers to execute arbitrary JavaScript on the victim's browser...