Mmgallery · Mmgallery · CVE-2006-6118
**Name of the Vulnerable Software and Affected Versions**
mmgallery version 1.55
**Description**
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the `page` parameter in the thumbs.php file.
**Recommendations**
For mmgallery version 1.55, consider restricting access to the thumbs.php file until a patch is available, and avoid using the `page` parameter in this file to minimize the risk of exploitation.