← Database

CVE-2025-13450

LOW CVSS: 3.5 Published: 2025-11-20 Modified: 2026-06-17

Description

A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument f_name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

Affected Platforms

Oretnom23 Online Shop Project

Weakness Type

CWE-79, CWE-94, CWE-79

References