If the xml comes in as a cgi query, you're stuck with parsing it out of the query first. You may as well use CGI.pm for that. You can certainly do this, however:

use XML::XPath;
my $xp = XML::XPath -> new( xml => $cgi->param('foo');
[download]

After Compline,
Zaxo