Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.Referenceshttp://lists.fedoraproject.org/pipermail/package-announce/2012-June/082954.htmlhttp://gallery.menalto.com/gallery_3_0_4http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082995.html