PULSE
ES
FEED
ransomrhysida reclama a Cipsa Industrias Sa De Cv · MX · Manufacturingransomqilin reclama a Richland Resources Corporation · US · Energy & Utilitiesransomsilentransomgroup reclama a A... F...ransomqilin reclama a Sistemas Visuales 360 · MX · Technologyransomqilin reclama a Societe Ivoirienne De Telediffusion · CI · Technologyransomqilin reclama a Palletline · GB · Transportationransomaurora reclama a Rapid Manufacturing · Manufacturingransomakira reclama a FrenchCreek Production · US · Energy & Utilitiesransomqilin reclama a Light Rail Manila · PH · Transportationransomakira reclama a Hudson & Hudson Sign Products · US · Manufacturingransomakira reclama a Service One Transportation · Transportationransomqilin reclama a Farmacia I · MX · Healthcareransomqilin reclama a Grupo Ciosa, SAPI de CV · MX · Otherransomqilin reclama a iFink · RO · Technologyransomrhysida reclama a Cipsa Industrias Sa De Cv · MX · Manufacturingransomqilin reclama a Richland Resources Corporation · US · Energy & Utilitiesransomsilentransomgroup reclama a A... F...ransomqilin reclama a Sistemas Visuales 360 · MX · Technologyransomqilin reclama a Societe Ivoirienne De Telediffusion · CI · Technologyransomqilin reclama a Palletline · GB · Transportationransomaurora reclama a Rapid Manufacturing · Manufacturingransomakira reclama a FrenchCreek Production · US · Energy & Utilitiesransomqilin reclama a Light Rail Manila · PH · Transportationransomakira reclama a Hudson & Hudson Sign Products · US · Manufacturingransomakira reclama a Service One Transportation · Transportationransomqilin reclama a Farmacia I · MX · Healthcareransomqilin reclama a Grupo Ciosa, SAPI de CV · MX · Otherransomqilin reclama a iFink · RO · Technology
← All CVEs
CVE WatchOct 30, 2026

CVE-2026-117182

An authenticated cross-site scripting (XSS) vulnerability in the /spina/embeddable.rb component of Spina CMS v2.21.0 allows attackers to exe

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Oct 30, 2026 · Last modified: Oct 30, 2026

EPSS · 30d

Not enough EPSS history yet.

Technical description

An authenticated cross-site scripting (XSS) vulnerability in the /spina/embeddable.rb component of Spina CMS v2.21.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted URL.

Official references
Related CVEs

No related CVEs by CWE or product.