Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
if(8>b){var a=function(d,f){return d[f]?d[f]:null}(this.baseColors,function(d,f){null==d.entries&&(d.entries=[]);for(var k=0;k<d.entries.length;k++)if(null!=d.entries[k].key.equals&&d.entries[k].key.equals(f)||d.entries[k].key===f)return d.entries[k].value;return null}(g.colorIds_$LI$(),b));if(null!=a)return a.getColor$com_mxgraph_io_vsdx_mxVsdxTheme(this)}else if(8===b){if(null!=this.bkgndColor)return this.bkgndColor.getColor$com_mxgraph_io_vsdx_mxVsdxTheme(this)}else{a=null;var c=0;200<=b?c=b-200: