In JetBrains TeamCity prior to 2022.10.2 there was an XSS vulnerability in the user creation process.
jetbrains teamcity