In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process.
CWE-79, CWE-79