A stored cross-site scripting (XSS) vulnerability exists in GitLab CE/EE versions from 18.2.2 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1. An authenticated user could exploit GitLab Flavored Markdown to inject malicious scripts that execute in other users' browsers. This vulnerability has been remediated by GitLab.