CVE advisoryCRITICAL
CVE-2025-43955
Convertigo XPath Expression Injection Vulnerability.
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in Convertigo's XPath processing that allows for expression injection if an attacker can influence the evaluated XPath expression. This could potentially lead to unauthorized access and data manipulation in externally facing applications. It is important to confirm Convertigo usage and a