In JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details pageReferenceshttps://www.jetbrains.com/privacy-security/issues-fixed/