VULNERABILITY INTELLIGENCE
CVE-2026-82090
EPSS probability0.44%
CISA KEVNot currently listed
Published2026-08-28
Last modified2026-09-09
Description
Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. JavaScript code can alter the application state via native bridge methods.
Weakness classification
- cve@mitre.org: CWE-79