Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
fa[la]=ma),ma.push(oa))}ia=ia.nextSibling}l(Ea,Ta,Ha)}})}function z(ia){E&&(Ba.scrollTop=0,ea.innerText="",Qa.spin(ea),k=!1,V=!0,za.innerText=mxResources.get("recentDiag"),Z=null,E(Va,function(){g(mxResources.get("cannotLoad"));Va([])},ia?null:v))}function C(ia){if(""==ia)null!=G&&(G.click(),G=null);else{if(null==TemplatesDialog.tagsList[d]){var aa={};for(La in Ea)for(var la=Ea[La],ma=0;ma<la.length;ma++){var oa=la[ma];if(null!=oa.tags)for(var fa=oa.tags.toLowerCase().split(";"),ja=0;ja<fa.length;ja++)null==