Summary
The remote host is running TikiWiki, a content management system written in PHP.
The remote version of this software is vulnerable to cross-site scripting attacks in tiki-error.php script due to a lack of user input sanitization.
Solution
Upgraded to version 1.7.8 or newer.