CVE-2026-22804

This repository contains a functional Proof of Concept (PoC) for CVE-2026-22804, a Stored XSS vulnerability in Termix (versions 1.7.0 to 1.9.0). The exploit leverages unsafe SVG rendering via `dangerouslySetInnerHTML` to execute arbitrary JavaScript, leading to session hijacking and local file inclusion in the Electron environment.

This repository contains a functional exploit for CVE-2026-22804, demonstrating a stored XSS vulnerability in Termix's File Manager component. The exploit uploads a malicious SVG file via SSH, which executes arbitrary JavaScript when rendered, leading to session hijacking and LFI in the Electron environment.