Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names related to components/dashboard/Dashboard.jsx components/dashboard/EditDashboardModal.jsx and pages/ShowDashboardPage.jsx.