Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
h.mxgraph.io.vsdx.mxVsdxUtils.conversionFactor_$LI$(),b=Math.round(100*b)/100);null!=d&&(a=parseFloat(d.getAttribute("V"))*h.mxgraph.io.vsdx.mxVsdxUtils.conversionFactor_$LI$(),a=Math.round(100*a)/100);return new mxPoint(a,b)};g.prototype.getDrawingScale=function(){var b=this.cellElements;b=b.DrawingScale?b.DrawingScale:null;return null!=b?parseFloat(b.getAttribute("V"))*h.mxgraph.io.vsdx.mxVsdxUtils.conversionFactor_$LI$():1};g.prototype.getPageScale=function(){var b=this.cellElements;b=b.PageScale?
b.PageScale:null;return null!=b?parseFloat(b.getAttribute("V"))*h.mxgraph.io.vsdx.mxVsdxUtils.conversionFactor_$LI$():1};g.prototype.getCellValue=function(b){var a=this.cellElements;b=a[b]?a[b]:null;return null!=b?b.getAttribute("V")||"":null};g.prototype.getCellIntValue=function(b,a){b=this.getCellValue(b);return null!=b?parseInt(b):a};g.prototype.getId=function(){return this.Id};g.prototype.getPageName=function(){return this.pageName};g.prototype.getPageNameU=function(){return this.pageNameU};g.prototype.getShapes=