Convertigo

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 1
    Known Exploited: 0
    0
    Critical Level Threats
    0
    High Level Threats
    0
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2025-43955

    TwsCachedXPathAPI in Convertigo versions before 8.3.11 did not restrict commons-jxpath functions, which could allow expression injection in contexts where an attacker can influence an evaluated XPath expression. Convertigo 8.3.11 fixes the issue by assigning an empty FunctionLibrary to JXPath contexts.

    Last Modified: Aug 26, 2026
    Published: Apr 20, 2025
    Items Per Page
    Convertigo Vulnerabilities & Security CVEs | CVE-DB