| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/commerce_paypal | ≥ 2.0.0, < 2.1.3< 1.12.0 | 2.1.31.12.0 |
| commerce paypal | ≥ 2.0.0, < 2.1.3< 1.12.0 | 2.1.31.12.0 |
This module enables you to pay for Commerce transactions using Paypal.
The module doesn't sufficiently validate the transaction result in certain circumstances, allowing a malicious user to mark transactions placed without payment.
This vulnerability only affects sites using the Payflow Link payment gateway.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free