JetBrains YouTrack versions prior to 2019.2.53938 had a possible XSS through issue attachments when using the Firefox browser.
jetbrains youtrack