Security AnimaGallery 2.6 LFI / XSS / File Upload June 4, 2015 007admin Leave a comment AnimaGallery version 2.6 suffers from cross site scripting, local file inclusion, and remote shell upload vulnerabilities.