CyberRota Analysis
AI-GeneratedThe vulnerability affects the "Save to Pocket" feature in Pocket versions up to 8.33.0.0, allowing for cross-site scripting (XSS) due to the injection of external HTML into the DOM. This could enable attackers to execute arbitrary JavaScript, potentially altering the application state and compromising user data. Organizations using affected versions of Pocket should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. JavaScript code can alter the application state via native bridge methods.