Dashboard / CVE-2026-117182

CVE-2026-117182

1 PoC
INFO Priority: 0.00 BB Relevance: 10/100
Published: 2026-10-30 Modified: 2026-10-30 First seen: 2026-10-30 Status: pending_score

Description

An authenticated cross-site scripting (XSS) vulnerability in the /spina/embeddable.rb component of Spina CMS v2.21.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted URL.

Affected Software (1)

VendorProductVersion
n/a n/a n/a

References & Advisories (2)

Proof of Concept (1)

—
https://github.com/Primandito/CVE-2026-117182
nomi-sec

Bug Bounty Relevance

10 / 100
✓ PoC available (1)

CVSS Score

Unscored

EPSS — Exploitation Probability

0.30%
Raw Score 0.003010
Percentile 22.9%
Date 2026-10-31

Intelligence Sources

mitre ref →
nvd ref →

External Links