In JetBrains TeamCity before 2022.04 reflected XSS on the Build Chain Status page was possible
CWE-79, CWE-79