In JetBrains TeamCity prior to 2023.05 reflected XSS in the Subscriptions page was possible
jetbrains teamcity