Read the docs

Convertigo

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Convertigo records in CISA KEV

No Convertigo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Convertigo 1 record LOW

Records

1 record in Convertigo · all components

TI-2025-28519 CVE-2025-43955 · GHSA-mwx3-c2hq-28xw

Injection in Convertigo

Priority LOW 30

TwsCachedXPathAPI in Convertigo versions before 8.3.11 did not restrict commons-jxpath functions, which could allow expression injection in contexts where an attacker can influence an evaluated XPath expression.

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.0036 Published 2025-04-20 No fix listed CWE-749
Open these records in search →