JetBrains TeamCity prior to 2020.2 was vulnerable to reflected XSS on several pages.
jetbrains teamcity