Editor-to-administrator escalation via stored alerting XSS

Stored XSS in affected Grafana 8.x and 9.x releases allows remote authenticated users to gain administrator access through Unified Alerting. Grafana Labs has not published the exact input field, rendering sink, or missing neutralization step; the disclosed flow stores attacker-controlled content that executes after an administrator follows a crafted link. The attacker needs Editor access, Grafana Alerting must be enabled, and an authenticated administrator must follow the link; successful exploitation changes the attacker's role to Administrator.