The default configuration of cfg.packagepagesactionsexcluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors.
"https://github.com/pypa/advisory-database/blob/main/vulns/moin/PYSEC-2010-3.yaml"