Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.loadImage(Y.target.result,mxUtils.bind(this,function(da){this.resizeImage(da,Y.target.result,mxUtils.bind(this,function(qa,ka,Aa){Q(T,mxUtils.bind(this,function(){if(null!=qa&&qa.length<A){var xa=C&&this.isResampleImageSize(W.size,S)?Math.min(1,Math.min(q/ka,q/Aa)):1;return p(qa,W.type,e+T*k,g+T*k,Math.round(ka*xa),Math.round(Aa*xa),W.name)}this.handleError({message:mxResources.get("imageTooBig")});return null}))}),C,q,S,W.size)}),mxUtils.bind(this,function(){this.handleError({message:mxResources.get("invalidOrMissingFile")})})))}else Z=