CVE-2025-13450 is a cross-site scripting (XSS) vulnerability in SourceCodester Online Shop Project 1.0, specifically in the /shop/register.php file. The vulnerability arises from manipulation of the f_name argument, allowing remote attackers to inject malicious scripts. The exploit has been publicly disclosed. The CVSS score is 3.5, indicating a low severity impact.