{"id":"CVE-2026-117182","published":"2026-10-30T16:17:41.560","lastModified":"2026-10-30T19:39:14.897","description":"An authenticated cross-site scripting (XSS) vulnerability in the /spina/embeddable.rb component of Spina CMS v2.21.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted URL.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://github.com/Primandito/CVE-2026-117182","tags":[]},{"url":"https://github.com/SpinaCMS/Spina/issues/1452","tags":[]}],"exploitRefs":[{"url":"https://github.com/Primandito/CVE-2026-117182","tags":[]},{"url":"https://github.com/SpinaCMS/Spina/issues/1452","tags":[]}],"hasPoc":true,"ai":null}