VendorsApps Mavscratch_%5C%26_winall versions
Vulnerabilities

Apps Mav Scratch & Win

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2024-11898
Scratch & Win – Giveaways and Contests <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2024-12-03 · Analyzed
6.4EPSS 0.003
CVE-2024-12545
Scratch & Win – Giveaways and Contests <= 2.7.1 - Cross-Site Request Forgery via reset_installation Function
Published 2025-01-04 · Analyzed
5.4EPSS 0.002