CVE-2004-2267

Cross-site scripting XSS vulnerability in Ansel 2.1 and earlier allows remote attackers to inject arbitrary HTML or web script via the album name...