In JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details page