CVE-2012-4342
Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Date published : 2012-08-15
http://gallery.menalto.com/gallery_3_0_4
http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082995.html