Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082995.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082954.html