Drupal Commerce Stripe vulnerabilities

The Commerce Stripe module for Drupal contains a Cross-Site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. The issue affects versions from 2.0.0 to 2.2.3.

The Drupal Commerce Stripe module contains an improper verification of cryptographic signature vulnerability, allowing signature spoofing. This issue affects versions from 0.0.0 to 1.4 and from 2.0.0 to 2.2.3.

The Drupal Commerce Stripe module is vulnerable to Cross-Site Request Forgery (CSRF), which can force unwanted actions on behalf of a logged-in user. This issue affects versions from 2.0.0 to 2.2.3.