Stored Cross-Site Scripting Vulnerability in Heptabase by Hepta Platforms, Inc.
CVE-2026-78213

6.2MEDIUM

Key Information:

Vendor

Hepta Platforms

Status
Heptabase
Vendor
CVE Published:
24 August 2026

What is CVE-2026-78213?

The Heptabase application, developed by Hepta Platforms, Inc., is susceptible to a Stored Cross-Site Scripting flaw. This vulnerability allows authenticated remote attackers to inject persistent malicious scripts into designated pages. When other users subsequently interact with these compromised pages, the injected JavaScript code executes in their browsers, potentially leading to unauthorized actions or data exfiltration. Mitigating this issue is critical to safeguarding user data and maintaining application integrity.

Affected Version(s)

Heptabase all

References

https://www.twcert.org.tw/tw/cp-132-11125-9d359-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-11124-b8b51-2.html
third-party-advisory

CVSS V4

Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.