In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data