Threats tagged 'drupal-contrib-2026-302'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-122071Commerce escrow · This module enables you to accept payments through Escrow.com with Drupal Commerce High2026-11-04GCVE DatabaseCVE-2026-122071 The Drupal Commerce Escrow module before version 1.1.0 does not properly verify incoming webhook notifications from Escrow.com. This flaw allows attackers to forge payment and order status updates, potentially marking unpaid orders as paid or completed, or cancelling orders that are in progress. Vulnerability #drupal-contrib-2026-302 #packagist-https-packages-drupa	GCVE Database	2026-11-04

Page 1 of 1