Description
HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an HTML injection due to a lack of proper validation of user input by sending a request to '/search' using the 'q' parameter.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Botble | TransP | all versions | — |
| Botble | Athena | all versions | — |
| Botble | Martfury | all versions | — |
| Botble | Homzen | all versions | — |