CVE-2024-22048EPSS p41.0%

CVE-2024-22048CVE-2024-22048

gov.uk / govuk_tech_docs

Description

govuk_tech_docs versions from 2.0.2 to before 3.3.1 are vulnerable to a cross-site scripting vulnerability. Malicious JavaScript may be executed in the user's browser if a malicious search result is displayed on the search page.

Scoring

CVSS 6.1 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS0.50% probability of exploitation · percentile 41.0% · 2026-10-05T12:00:23Z
Last modified2026-07-14
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.