Description esoTalk 1.0.0g4 has XSS via the PATH_INFO to the conversations/ URI. References https://github.com/esotalk/esoTalk/issues/444 https://lists.openwall.net/full-disclosure/2015/12/23/13