CVE-2025-34032

A reflected cross-site scripting XSS vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the data parameter in jsmol.php. The application fails to properly sanitize user input before embedding it into the HTTP response, allowing an attacker to execute arbitrary JavaScript...

Moodle LMS Jmol plugin 路径遍历漏洞

Moodle LMS Jmol plugin is an open source plugin for Moodle. A path traversal vulnerability exists in Moodle LMS Jmol plugin version 6.1 and earlier, which stems from the query parameter in jsmol.php being passed directly to the filegetcontents function without validation, which could lead to...

VulnCheck KEV: CVE-2025-34031

A path traversal vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the query parameter in jsmol.php. The script directly passes user input to the filegetcontents function without proper validation, allowing attackers to read arbitrary files from the server's...