The FooGallery plugin 1.8.12 for WordPress allow XSS via the post_title parameter.
fooplugins foogallery