In JetBrains YouTrack prior to 2021.1.9819, a pull request's title was sanitized insufficiently, leading to XSS.