Name of the Vulnerable Software and Affected Versions graylog-web-interface versions (all versions)

Description The issue concerns a failure to escape output on the TypeAhead and QueryInput components, potentially allowing attackers to execute arbitrary JavaScript on the victim's browser through Cross-Site Scripting (XSS).

Recommendations Consider using an alternative package until a fix is made available.