Security Advisory
CVE-2025-13451
7.3
HIGH
Vulnerability Description
A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Published Date
November 20, 2025
Official Source
NIST NVD Advisory