CVE-2026-78213

Heptabase developed by Hepta Platforms, Inc. has a Stored Cross-Site Scripting vulnerability. Authenticated remote attackers can inject persistent malicious content into specific pages, causing arbitrary JavaScript code to execute when other users click the crafted content.

• CWE-79

• https://www.twcert.org.tw/en/cp-139-11124-b8b51-2.html
• https://www.twcert.org.tw/tw/cp-132-11125-9d359-1.html

Published

Aug 24, 2026

Last Modified

Aug 24, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-78207exceljs-hardened before 5.0.0 contains a prototype pollution…9.4
• CVE-2026-78208exceljs-hardened before 5.0.0 contains a path traversal vuln…7.5
• CVE-2026-78209exceljs-hardened versions before 5.0.0 fail to neutralize le…8.2
• CVE-2026-7821Improper certificate validation in Ivanti EPMM before versio…9.1
• CVE-2026-782114MOSAn GCB Doctor developed by 4MOSAn Security Technology ha…9.8
• CVE-2026-782124MOSAn developed by 4MOSAn Security Technology Co., Ltd. has…7.5
• CVE-2026-7822A vulnerability was identified in itsourcecode Courier Manag…6.3
• CVE-2026-7823A security flaw has been discovered in Totolink A8000RU 7.1c…9.8
• CVE-2026-7824An issue was discovered in the PaperCut Hive Ricoh embedded …5.9
• CVE-2026-78244A vulnerability was detected in itsourcecode Real Estate Man…7.3
• CVE-2026-78245A flaw has been found in itsourcecode Online Pharmacy System…7.3
• CVE-2026-78246A vulnerability has been found in itsourcecode Online Clinic…7.3