In JetBrains TeamCity prior to 2023.05 stored XSS in the Commit Status Publisher window was possible
jetbrains teamcity