A script address can be combined with a stake key so that staking rewards accrue from ADA held in the script. I have verified this on testnet
.
Currently, a script address cannot be a stake key, but I have the impression that might change in the future. So, right now, a script cannot spend staking rewards.
See this thread for more discussion.