Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
C,this.thumbImageCache)):C(m)});N?this.embedFonts(p,L):(this.editor.addFontCss(p),L(p))}catch(m){this.handleError(m)}};EditorUi.prototype.addRadiobox=function(d,g,n,q,t,v,B){return this.addCheckbox(d,n,q,t,v,B,!0,g)};EditorUi.prototype.addCheckbox=function(d,g,n,q,t,v,B,F){v=null!=v?v:!0;var I=document.createElement("input");I.style.marginRight="8px";I.style.marginTop="16px";I.setAttribute("type",B?"radio":"checkbox");B="geCheckbox-"+Editor.guid();I.id=B;null!=F&&I.setAttribute("name",F);n&&(I.setAttribute("checked",