Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2026-1183

HTML injection in multiple Botble products

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCIBE

Description

HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an HTML injection due to a lack of proper validation of user input by sending a request to '/search' using the 'q' parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Botble TransP

Default version status: unaffected

  • all versionsaffected

Botble Athena

Default version status: unaffected

  • all versionsaffected

Botble Martfury

Default version status: unaffected

  • all versionsaffected

Botble Homzen

Default version status: unaffected

  • all versionsaffected

References