Multiple cross-site scripting (XSS) vulnerabilities in index.php in Hitmaaan Gallery 1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) gall and (2) levela parameters.
- http://packetstormsecurity.org/1001-exploits/galleriehitmaaan-xss.txt
No PoCs found on GitHub currently.