CVE-2024-22048

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2024-01-04 Modified: 2026-11-08 First seen: 2026-11-08 Status: pending_score

Description

govuk_tech_docs versions from 2.0.2 to before 3.3.1 are vulnerable to a cross-site scripting vulnerability. Malicious JavaScript may be executed in the user's browser if a malicious search result is displayed on the search page.

Affected Software (1)

VendorProductVersion
— — 2.0.2 < 3.3.1

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.50%
Raw Score 0.005040
Percentile 43.7%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00504
2026-11-12
0.00504
2026-11-10
0.00504
2026-11-09
0.00504
2026-11-08
0.00504

Intelligence Sources

mitre ref →