In JetBrains TeamCity prior to 2019.2, several user-level pages were vulnerable to XSS.
jetbrains teamcity