Known vulnerabilities in Commerce Stripe

Vendor: iler
Software: Commerce Stripe
Software CPE: cpe:2.3:a:iler:commerce_stripe:*:*:*:*:*:drupal:*:*
Website: https://www.drupal.org/u/iler
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Commerce Stripe Commerce Stripe is affected by 3 known vulnerabilities: 1 medium, 2 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU158444 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 2.2.3 29.10.2026 SB20261029168
#VU158442 - Improper Verification of Cryptographic Signature
CVE-2026-118559		 CWE-347 Medium
No
No
 1.4, 2.2.3 29.10.2026 SB20261029168
#VU158421 - Cross-Site Request Forgery (CSRF)
CVE-2026-118558		 CWE-352 Low
No
No
 2.2.3 29.10.2026 SB20261029168