This vulnerability in jQWidgets up to version 24.0.1 allows an attacker to manipulate object prototype attributes improperly through the JQXLite.extend/jqxBaseFramework.extend function in the jqwidgets/jqx-all.js file. This flaw could be exploited remotely without user interaction or privileges. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity. No official fix or remediation level has been published, and the associated GitHub issue was closed with a "not planned" label, suggesting no planned patch from the vendor.

The vulnerability allows remote attackers to improperly modify object prototype attributes, which can lead to unexpected behavior or potential security issues in applications using the affected jQWidgets versions. However, no known exploits are reported in the wild, and the impact is rated medium severity based on the CVSS score.

No official patch or remediation is currently available for this vulnerability. Since the vendor has closed the related issue as "not planned," users should consider alternative mitigations such as avoiding use of the affected versions (24.0.0 and 24.0.1) or applying custom code reviews and controls to limit exposure to prototype pollution risks. Monitor vendor channels for any future updates.