CVE-2026-30760

Published: May 28, 2026Modified: Jun 17, 2026Deferred

7.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitability: 3.9 / Impact: 3.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue in SourceBans Material Admin before v.1.1.6 (3ecd95e) allows attackers to manipulate arbitrary user data in the web app via a crafted XAJAX call.

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

https://gist.github.com/ng-dst/450b698433f628990921f1e5ab46ff8c

Source: cve@mitre.org

https://gist.github.com/ng-dst/ca6663a4107fd39eaba1be2cb1d52b51

Source: cve@mitre.org

https://github.com/SB-MaterialAdmin/Web

Source: cve@mitre.org

https://github.com/SB-MaterialAdmin/Web/issues/374

Source: cve@mitre.org

Timeline

No history available yet.