In JetBrains TeamCity prior to 2023.05 stored XSS in the NuGet feed page was possible
jetbrains teamcity