CVE-2026-1183 — HTML injection in multiple Botble products

CVE-2026-1183

HTML injection in multiple Botble products PUBLISHED

Description (CNA)

HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an HTML injection due to a lack of proper validation of user input by sending a request to '/search' using the 'q' parameter.

Affected (CNA)

Vendor / product	Versions
Botble / TransP	affected all versions
Botble / Athena	affected all versions
Botble / Martfury	affected all versions
Botble / Homzen	affected all versions

CWE

CWE-79

References

https://www.incibe.es/en/incibe-cert/notices/aviso/html-injection-multiple-botble-products

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.