Ranjan

**Name of the Vulnerable Software and Affected Versions** Scry Gallery version 1.1 **Description** A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the `p` parameter in index.php. **Recommendations** For Scry Gallery version 1.1, avoid using the `p` parameter in the index.php file until a fix is available. As a temporary workaround, consider restricting access to index.php to minimize the risk of exploitation.