JetBrains YouTrack before 2021.4.31698 was vulnerable to stored XSS on the Notification templates page.