Vulnerability Description
A vulnerability was determined in jQWidgets up to 24.0.1. This affects the function JQXLite.extend/jqxBaseFramework.extend of the file jqwidgets/jqx-all.js. This manipulation causes improperly controlled modification of object prototype attributes. The attack can be initiated remotely. The reported GitHub issue was closed with the label "not planned".
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/jqwidgets/jQWidgets/
- https://github.com/jqwidgets/jQWidgets/issues/764
- https://vuldb.com/cve/CVE-2026-78178
- https://vuldb.com/submit/884182
- https://vuldb.com/vuln/394562
- https://vuldb.com/vuln/394562/cti
FAQ
What is CVE-2026-78178?
CVE-2026-78178 is a vulnerability with a CVSS score of 7.3 (HIGH). A vulnerability was determined in jQWidgets up to 24.0.1. This affects the function JQXLite.extend/jqxBaseFramework.extend of the file jqwidgets/jqx-all.js. This manipulation causes improperly control...
How severe is CVE-2026-78178?
CVE-2026-78178 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-78178?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.