Cross-site scripting (XSS) vulnerability in MoinMoin 1.5.x through 1.5.8 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the login action.
"https://github.com/pypa/advisory-database/blob/main/vulns/moin/PYSEC-2026-667.yaml"