Volerion logoVolerion
Volerion logoVolerion

Botble Products HTML Injection Vulnerability

Vulnerability

A medium-severity HTML injection vulnerability has been identified in multiple Botble products, including TransP, Athena, Martfury, and Homzen. The issue arises from inadequate validation of user input, allowing for HTML injection by sending a request to the '/search' endpoint with the 'q' parameter.

Impact

Exploitation of this vulnerability allows for HTML injection, which could be used to manipulate the way content is displayed or to execute malicious scripts in the context of the user.

Added: Jan 20, 2026, 1:19 PM
Updated: Jan 20, 2026, 1:19 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
1.7
exploitability
6.6
remediation
0.0
relevance
2.2
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.