Galette is a membership management web application geared towards non-profit organizations. In affected versions, malicious javascript code can be stored to be displayed later on the self-subscription page. Additionally, malicious javascript code can be executed on login and retrieve password pages.