Launchpad.net

CVE 2012-2129

Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action.

See the CVE page on Mitre.org for more details.