TI-2026-56647 CVE-2026-82090 · GHSA-xfmw-9xm9-7q4j
Cross-site scripting in getpocket Pocket
Priority HIGH 75
Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM.
No getpocket vulnerabilities are listed in CISA KEV.
1 record
Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM.