In JetBrains YouTrack before 2022.1.43700 it was possible to inject JavaScript into Markdown in the YouTrack Classic UIReferenceshttps://www.jetbrains.com/privacy-security/issues-fixed/
