Kubik-Rubik Simple Image Gallery Extended (SIGE), versions 3.2.3 and previous, XSS (Cross Site Scripting)
resolution: update to 3.2.4 (latest release is 3.3.0)
update notice: https://joomla-extensions.kubik-rubik.de/sige-simple-image-gallery-extended#changelog
Note that the developer did not inform the VEL
.