Cross-site scripting (XSS) vulnerability in the rsslink function in theme/init.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link.
"https://github.com/pypa/advisory-database/blob/main/vulns/moin/PYSEC-2013-23.yaml"