CVE-2026-78178

EUVD-2026-64700
A vulnerability was determined in jQWidgets up to 24.0.1. This affects the function JQXLite.extend/jqxBaseFramework.extend of the file jqwidgets/jqx-all.js. This manipulation causes improperly controlled modification of object prototype attributes. The attack can be initiated remotely. The reported GitHub issue was closed with the label "not planned".
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.3 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 36.37%
Common Weakness Enumeration
References
https://github.com/jqwidgets/jQWidgets/
https://github.com/jqwidgets/jQWidgets/issues/764
https://vuldb.com/cve/CVE-2026-78178
https://vuldb.com/submit/884182
https://vuldb.com/vuln/394562
https://vuldb.com/vuln/394562/cti