GalleryCreator — Vulnerabilities & Security Advisories 6

Gallerycreator is a web application designed for creating and managing image galleries, commonly used by websites to display photo collections. Historically, it has been vulnerable to multiple security issues including remote code execution, cross-site scripting, and privilege escalation vulnerabilities. These weaknesses often stem from insufficient input validation and improper access controls. The application has accumulated six CVE records, highlighting recurring security flaws in its handling of file uploads and user permissions. While no major publicized incidents have been documented, the consistent pattern of vulnerabilities suggests potential risks for unpatched deployments, particularly in environments where user-uploaded content is not properly sanitized or restricted.