A vulnerability, which was classified as problematic, was found in Botble TransP, Athena, Martfury and Homzen. This vulnerability affects unknown code of the file /search. Executing a manipulation of the argument q can lead to cross site scripting.

This vulnerability appears as CVE-2026-1183. The attack may be performed from remote. There is no available exploit.