CyberSecBulletin

Geoffrowland vulnerabilities

We track 1 vulnerability in Geoffrowland products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 24, 2025.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Geoffrowland vulnerabilities

  • 7.5 High severity

    Jmol Plugin: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2025-34031MoodleEPSS 3.06%

    A path traversal vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the query parameter in jsmol.php. The script directly passes user input to the file_get_contents() function without proper validation, allowing attackers to read arbi