1. Home
  2. CVE Database
  3. CVE-2026-82090
NONE · 0

CVE-2026-82090

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM.  JavaScript code can alter the application state via native bridge methods.

Vulnerability Description

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM.  JavaScript code can alter the application state via native bridge methods.

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2026-82090?

CVE-2026-82090 is a documented vulnerability. Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM.  JavaScript code can alter the application state via native bridge methods.

How severe is CVE-2026-82090?

CVSS scoring is not yet available for CVE-2026-82090. Check NVD for updates.

Is there a patch for CVE-2026-82090?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.