PCI Compliance Issues

A PCI scan of my website identified injection attack issues with the Wiki module.

I did some testing and was able to execute some javascript code on a Wiki page in one of two ways:

1) By putting the script in the query string (i.e., wiki?topic=alert('hi');

2) By putting the script in a Wiki comment

Are there any plans to resolve these issues?

Start by reproducing the two reported vectors in the Wiki module: a script in the topic query string and a script in a Wiki comment. Trace how each value is rendered, then verify that both inputs are displayed inertly rather than executed.

Written by the indexing model from the issue text.