CVE-2025-34032 is a reflected cross-site scripting (XSS) vulnerability affecting the Jmol plugin (version 6.1 and prior) for Moodle LMS. It allows an attacker to inject arbitrary JavaScript into a victim's browser via the 'data' parameter in jsmol.php due to insufficient input sanitization. Rated Medium (CVSS 6.1), the vulnerability requires user interaction (UI:R) but can lead to session hijacking or content manipulation. Exploitation has been observed in the wild by the Shadowserver Foundation, and Nuclei templates exist, though no Metasploit or ExploitDB modules are publicly available. Community discussion and media coverage are currently low.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 6.1CPE matchmatch criteria | cpe:2.3:a:geoffrowland:jmol:*:*:*:*:*:moodle:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.