CVE-2015-9285

esoTalk 1.0.0g4 has XSS via the PATH_INFO to the conversations/ URI.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-04-29

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Esotalk (Esotalk)

References

• https://github.com/esotalk/esoTalk/issues/444
• https://lists.openwall.net/full-disclosure/2015/12/23/13