CVE-2026-30760

An issue in SourceBans Material Admin before v.1.1.6 (3ecd95e) allows attackers to manipulate arbitrary user data in the web application. The root cause is improper input validation, which can be triggered via a crafted XAJAX call . No specific exploit links or remediation instructions are provid...