In JetBrains TeamCity prior to 2023.05.1 stored XSS when using a custom theme was possible
jetbrains teamcity