Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-78178

jQWidgets jqx-all.js jqxBaseFramework.extend prototype pollution

Description

A vulnerability was determined in jQWidgets up to 24.0.1. This affects the function JQXLite.extend/jqxBaseFramework.extend of the file jqwidgets/jqx-all.js. This manipulation causes improperly controlled modification of object prototype attributes. The attack can be initiated remotely. The reported GitHub issue was closed with the label "not planned".

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a jQWidgets

  • 24.0.0affected
  • 24.0.1affected

References