In JetBrains IntelliJ IDEA prior to 2022.1 reflected XSS via error messages in internal web server was possible
jetbrains intellij idea