Cross-site scripting (XSS) vulnerability in search.php of Gallery 1.1 through 1.3.4 allows remote attackers to insert arbitrary web script via the searchstring parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.039
EPSS Ranking 89.0%