DokuWiki suffers from an XSS vulnerability in the “Picture List” of the “mediamanager” It is possible to upload a picture with a specially crafted EXIF tag, containing script code. This code will be executed every time a user views the “mediamanager”.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/44449/2006-06-03-dokuwiki-xss.txt
Source: https://packetstormsecurity.com/files/44449/Trustix-Secure-Linux-Security-Advisory-2006.6.html