convertigo has 1 CVE on record. The median CVSS is 2.2 (low).

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 2.2
Publish → KEV: —
Last 90 days: 0 prev 0

Weakness classes

Products

convertigo 1

Follow convertigo:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

CVE-2025-43955Low· 2.2TwsCachedXPathAPI in Convertigo versions before 8.3.11 did not restrict commons-jxpath functions, which could allow expression injection in contexts where an attacker can influence an evaluated XPath expression12

convertigo vulnerabilities

CVEs affecting convertigo, newest first. Open any entry for full detail, references, and exploit status.

1 CVERSS

CVE-2025-43955Low· 2.2

1y ago

TwsCachedXPathAPI in Convertigo versions before 8.3.11 did not restrict commons-jxpath functions, which could allow expression injection in contexts where an attacker can influence an evaluated XPath expression

TwsCachedXPathAPI in Convertigo versions before 8.3.11 did not restrict commons-jxpath functions, which could allow expression injection in contexts where an attacker can influence an evaluated XPath expression. Convertigo 8.3.11 fixes t…

▾ Sunlitconvertigo · convertigoEPSS 0.35%via NVD