CVE-2020-13429
legend.ts in the piechart-panel (aka Pie Chart Panel) plugin before 1.5.0 for Grafana allows XSS via the Values Header (aka legend header) option.
Date published : 2020-05-24
https://github.com/grafana/piechart-panel/issues/218
https://github.com/grafana/piechart-panel/releases/tag/v1.5.0