JetBrains YouTrack versions prior to 2019.1.52584 had a possible XSS in the issue titles.
jetbrains youtrack