Winged Gallery v1.0 suffers from cross site scripting
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/47878/WingedGalleryv1.0.txt
Source: https://packetstormsecurity.com/files/47878/WingedGalleryv1.0.txt.html