CVE-2021-32772

CVE-2021-32772 affects Poddycast, a podcast app built with Electron. The root cause is improper sanitization of HTML in podcast feed data, allowing HTML/JavaScript injection via the feed content. In an Electron-based app, this XSS can be escalated to remote code execution, enabling commands to be...