In JetBrains TeamCity prior to 2022.04 reflected XSS on the Build Chain Status page was possible
jetbrains teamcity