VULNERABILITY INTELLIGENCE
CVE-2026-1183
EPSS probability0.31%
CISA KEVNot currently listed
Published2026-01-20
Last modified2026-06-17
Description
HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an HTML injection due to a lack of proper validation of user input by sending a request to '/search' using the 'q' parameter.
Weakness classification
- cve-coordination@incibe.es: CWE-79