SourceCodester Online Shop Cross-Site Scripting Vulnerability in Register.php

A cross-site scripting (XSS) vulnerability has been identified in SourceCodester Online Shop Project version 1.0. The issue resides in the register.php file, specifically within an unknown function that processes the f_name parameter. This vulnerability allows remote attackers to inject malicious scripts, which could be executed in the context of the user's browser, potentially compromising their security and privacy.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where injected scripts are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, navigate to the '/shop/register.php' page. Inject a script payload, such as an alert script, into the 'f_name' input box. After submitting the form, the injected script will execute when the page is refreshed.