Secunia Security Advisory – James Bercegay has reported some vulnerabilities in Gallery, which can be exploited by malicious people to conduct script insertion attacks and to bypass certain security restrictions.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/44346/sa19104.txt
Source: https://packetstormsecurity.com/files/44346/Secunia-Security-Advisory-19104.html