Improper Neutralization of Input During Web Page Generation in Kibana can lead to Stored XSS via case file upload.