← Database

CVE-2026-78178

HIGH CVSS: 7.3 Published: 2026-08-24 Modified: 2026-08-27

Description

A vulnerability was determined in jQWidgets up to 24.0.1. This affects the function JQXLite.extend/jqxBaseFramework.extend of the file jqwidgets/jqx-all.js. This manipulation causes improperly controlled modification of object prototype attributes. The attack can be initiated remotely. The reported GitHub issue was closed with the label "not planned".

Affected Platforms

Unknown

Weakness Type

CWE-94, CWE-1321

References