On the 18th July 2024 a change to our CMS was deployed that stopped the Stripe CMS payment plug-in from loading correctly on CMS websites.
This was raised as an urgent issue with the Product team, and a hotfix was coded ready for deployment, however due to an outstanding live CMS deployment issue, this was unable to be deployed until Monday 22nd July 2024.
Affected customers were contacted to advise the issue had been identified, and workarounds were put in place to temporarily disable the affected payment pages, with a message to call or email in to make a payment over the telephone.
The fixed code was deployed in the afternoon of 22nd July 2024 and affected customers were notified so they could remove any temporary messages placed on their websites.
The root cause of this incident was due to an update to the encryption library that we were using to resolve a security issue. The fix for the encryption issue was included in a CMS release on the 17th May 2024, however this code was not merged back into into the main branch, so an updated deployment on the 18th did not contain the fixed code. The code was merged and ready to deploy on the 22nd as soon as the outstanding CMS gateway deployment issues were made live.