PULSE
EN
FEED
ransomrhysida reclama a Cipsa Industrias Sa De Cv · MX · Manufacturingransomqilin reclama a Richland Resources Corporation · US · Energy & Utilitiesransomsilentransomgroup reclama a A... F...ransomqilin reclama a Sistemas Visuales 360 · MX · Technologyransomqilin reclama a Societe Ivoirienne De Telediffusion · CI · Technologyransomqilin reclama a Palletline · GB · Transportationransomaurora reclama a Rapid Manufacturing · Manufacturingransomakira reclama a FrenchCreek Production · US · Energy & Utilitiesransomqilin reclama a Light Rail Manila · PH · Transportationransomakira reclama a Hudson & Hudson Sign Products · US · Manufacturingransomakira reclama a Service One Transportation · Transportationransomqilin reclama a Farmacia I · MX · Healthcareransomqilin reclama a Grupo Ciosa, SAPI de CV · MX · Otherransomqilin reclama a iFink · RO · Technologyransomrhysida reclama a Cipsa Industrias Sa De Cv · MX · Manufacturingransomqilin reclama a Richland Resources Corporation · US · Energy & Utilitiesransomsilentransomgroup reclama a A... F...ransomqilin reclama a Sistemas Visuales 360 · MX · Technologyransomqilin reclama a Societe Ivoirienne De Telediffusion · CI · Technologyransomqilin reclama a Palletline · GB · Transportationransomaurora reclama a Rapid Manufacturing · Manufacturingransomakira reclama a FrenchCreek Production · US · Energy & Utilitiesransomqilin reclama a Light Rail Manila · PH · Transportationransomakira reclama a Hudson & Hudson Sign Products · US · Manufacturingransomakira reclama a Service One Transportation · Transportationransomqilin reclama a Farmacia I · MX · Healthcareransomqilin reclama a Grupo Ciosa, SAPI de CV · MX · Otherransomqilin reclama a iFink · RO · Technology
← Todos los CVEs
CVE Watch30 oct 2026

CVE-2026-117182

An authenticated cross-site scripting (XSS) vulnerability in the /spina/embeddable.rb component of Spina CMS v2.21.0 allows attackers to exe

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 30 oct 2026 · Última mod.: 30 oct 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

An authenticated cross-site scripting (XSS) vulnerability in the /spina/embeddable.rb component of Spina CMS v2.21.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted URL.

Referencias oficiales
CVEs relacionados

Sin CVEs relacionados por CWE o producto.