In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible
CWE-74, CWE-79