In JetBrains IntelliJ IDEA before 2026.3 hTML injection was possible in Remote Development editor tabs
CWE-80