CVE-2026-117182
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Oct 30, 2026
Vendor
unknown
Description
An authenticated cross-site scripting (XSS) vulnerability in the /spina/embeddable.rb component of Spina CMS v2.21.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted URL.