CVE-2025-13450 MEDIUM

CVE-2025-13450: SourceCodester Online Shop Project register.php cross site scripting

Vendor Sourcecodester

Product Online Shop Project

Weakness CWE-79 · XSS

Published November 20, 2025

Last update November 20, 2025

View on NVD All CVEs

CVSS base score

5.1/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction —

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument f_name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

Key dates

02Disclosure timeline

November 20, 2025 CVE published

November 20, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-13450 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html