Improper sanitization of HTML in directory names in the Nextcloud Android app prior to version 3.7.0 allowed to style the directory name in the header bar when using basic HTML.
- https://hackerone.com/reports/631227
No PoCs found on GitHub currently.