docker-vulnerable-dvwa/dvwa/vulnerabilities/javascript/source/medium.php

<?php
$page[ 'body' ] .= <<<EOF
<script src="/vulnerabilities/javascript/source/medium.js"></script>
EOF;
?>