Read the docs

getpocket

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

getpocket records in CISA KEV

No getpocket vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-56647 CVE-2026-82090 · GHSA-xfmw-9xm9-7q4j

Cross-site scripting in getpocket Pocket

Priority HIGH 75

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00436 Published 2026-08-28 No fix listed CWE-79
Open these records in search →