Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.
{ "ubuntu_priority": "medium" }