CVE-2026-117182

Vulnerability Description

An authenticated cross-site scripting (XSS) vulnerability in the /spina/embeddable.rb component of Spina CMS v2.21.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted URL.

References

https://github.com/Primandito/CVE-2026-117182
https://github.com/SpinaCMS/Spina/issues/1452

FAQ

What is CVE-2026-117182?

CVE-2026-117182 is a documented vulnerability. An authenticated cross-site scripting (XSS) vulnerability in the /spina/embeddable.rb component of Spina CMS v2.21.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted U...

How severe is CVE-2026-117182?

CVSS scoring is not yet available for CVE-2026-117182. Check NVD for updates.

Is there a patch for CVE-2026-117182?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.