Low CVSS: 2.2 CVE-2025-43955 TwsCachedXPathAPI in Convertigo through 8.3.4 does not restrict the use of commons-jxpath APIs.