Launchpad.net

CVE 2018-18623

Grafana 5.3.1 has XSS via the "Dashboard > Text Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.

See the CVE page on Mitre.org for more details.