Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-82090 1 Getpocket 1 Pocket 2026-08-28 N/A
Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM.  JavaScript code can alter the application state via native bridge methods.