A cross-site scripting (XSS) vulnerability exists in drupal-wiki.com Drupal Wiki versions prior to 8.31.1. The flaw allows injection of malicious scripts via comments, captions, and image titles on Wiki pages. This vulnerability can lead to limited confidentiality and integrity impacts but does not affect availability.