CVE-2021-32772

Poddycast is a podcast app made with Electron. Prior to version 0.8.1, an attacker can create a podcast or episode with malicious characters and execute commands on the client machine. The application does not clean the HTML characters of the podcast information obtained from the Feed, which allo...

CVE-2021-32772

CVE-2021-32772 affects Poddycast, a podcast app built with Electron. The root cause is improper sanitization of HTML in podcast feed data, allowing HTML/JavaScript injection via the feed content. In an Electron-based app, this XSS can be escalated to remote code execution, enabling commands to be...

CVE-2021-32772 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in helper_entries

Poddycast is a podcast app made with Electron. Prior to version 0.8.1, an attacker can create a podcast or episode with malicious characters and execute commands on the client machine. The application does not clean the HTML characters of the podcast information obtained from the Feed, which allo...