CVE-2026-1183

Publication date

2026-01-20 12:09:05

Family

INCIBE

State

PUBLISHED

Description

HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an HTML injection due to a lack of proper validation of user input by sending a request to /search using the q parameter.