TVN ID	TVN-202608006
CVE ID	CVE-2026-78213
CVSS	8.7 (High) CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Affected Products	Heptabase v1.91.3 (2026.04.28)
Description	Heptabase developed by Hepta Platforms, Inc. has a Stored Cross-Site Scripting vulnerability. Authenticated remote attackers can inject persistent malicious content into specific pages, causing arbitrary JavaScript code to execute when other users click the crafted content.
Solution	Upgrade Heptabase to version 1.93.1 or later
Credit	陳宥升 (CheN..)
Public Date	2026-08-24