Drupal Currency versions before 3.5.0 are affected by a Cross-Site Request Forgery (CSRF) vulnerability. This flaw allows an attacker to perform unauthorized actions on behalf of an authenticated user without their consent. The issue is fixed in version 3.5.0.