Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(){function U(){F(n,k,function(){N(k);n.editComment(n.content,function(){R(k)},function(T){H(k);U();b.handleError(T,null,null,null,mxUtils.htmlEntities(mxResources.get("objectNotFound")))})})}U()},n.isResolved),K(mxResources.get("delete"),function(){b.confirm(mxResources.get("areYouSure"),function(){N(k);n.deleteComment(function(U){if(!0===U){U=k.querySelector(".geCommentTxt");U.innerText="";mxUtils.write(U,mxResources.get("msgDeleted"));var T=k.querySelectorAll(".geCommentAction");for(U=