EncapsGallery Cross-Site Scripting and File Upload

Thomas Pollet has discovered a vulnerability and a security issue in EncapsGallery, which can be exploited by malicious people to conduct cross-site scripting attacks and by malicious users to compromise a vulnerable system.
Be sure to check if your system is missing security updates or have insecure applications installed:http://secunia.com/software_inspector/