PoC Archive PoC Archive

tag

Svg-Injection

High
Termix Stored XSS via Malicious SVG Upload -> LFI / Session Hijack (CVE-2026-22804 / GHSA-m3cv-5hgp-hv35)
CVE-2026-22804 (GHSA-m3cv-5hgp-hv35)· Termix (Electron-based SSH/terminal manager), File Manager component (FileViewer.tsx) patched