Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxUtils.setOpacity(V,100),O.style.visibility="",k.stop(),M())}))}else M();A.appendChild(K);++S==R&&(mxUtils.br(A),S=0)}function t(n){var z=B.value;if(null==n||null!=z&&0<z.length)q&&b.hideDialog(),m(z,n,B)}H="1"==urlParams.noDevice?!1:H;E=null!=E?E:!0;F=null!=F?F:!0;R=null!=R?R:4;q=null!=q?q:!0;v=document.createElement("div");v.style.whiteSpace="nowrap";null==d&&b.addLanguageMenu(v);var x=document.createElement("h2");mxUtils.write(x,u||mxResources.get("create"));x.style.marginTop="0px";x.style.marginBottom=