A vulnerability has been found in Scratch & Win Plugin up to 2.6.9 on WordPress and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting.

This vulnerability was named CVE-2024-11898. The attack can be initiated remotely. There is no exploit available.