QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2026-1183

Back to search

CVE-2026-1183

Published: Jan 20, 2026

Modified: Jan 20, 2026

PUBLISHED

Description

HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an HTML injection due to a lack of proper validation of user input by sending a request to '/search' using the 'q' parameter.

VendorProductVersions

Botble

TransP

affected
all versions

Botble

Athena

affected
all versions

Botble

Martfury

affected
all versions

Botble

Homzen

affected
all versions

Weaknesses (CWE)

CWE-79

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now