JVN#55833077: yappa-ng vulnerable to cross-site scripting

yappa-ng <http://www.zirkon.at/zirkon/scripts/yappa-ng/yappa-ng_main_eng.html&gt; provided by yet another PHP photo album next generation (according to the original report submitted by the reporter) is a PHP photo gallery.
yappa-ng contains a cross-site scripting vulnerability (CWE-79) which allows unintentional script execution on the user’s web browser.

Impact

An arbitrary script may be executed on the web browser of the user who is accessing a website that uses yappa-ng.

Solution

Consider stop using yappa-ng 2.3.2
Since the developer was unreachable, existence of any mitigations is unknown.