This vulnerability in SourceBans Material Admin prior to version 1.1.6 allows an attacker to manipulate arbitrary user data through a specially crafted XAJAX call. The issue arises from insufficient validation or authorization in handling XAJAX requests, which are used for asynchronous web interactions. No CVSS score or vendor remediation information is currently available, and no exploits have been observed in the wild. The vulnerability could potentially lead to unauthorized modification of user data within the web application.

The vulnerability permits attackers to manipulate arbitrary user data in the SourceBans Material Admin web application. This could compromise data integrity and potentially affect user accounts or administrative functions depending on the data altered. There is no evidence of exploitation in the wild or further impact such as privilege escalation or remote code execution documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been published, users should monitor for vendor updates and avoid exposing the affected application to untrusted networks until a patch is available.