An issue has been discovered in GitLab affecting all versions starting from 10.8. Reflected XSS on Multiple Routes