drupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via comments, captions, and image titles of a Wiki page.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')