Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
J.entries[L].key.equals(O)||J.entries[L].key===O){J.entries[L].value=M;return}J.entries.push({key:O,value:M,getKey:function(){return this.key},getValue:function(){return this.value}})})(this.vertexMap,new h.mxgraph.io.vsdx.ShapePageId(c,b.getId()),n);return n};m.rotatedEdgePoint=function(g,b,a,c){b=b*Math.PI/180;var d=Math.cos(b);b=Math.sin(b);var f=g.x-a,k=g.y-c;g.x=Math.round(f*d-k*b+a);g.y=Math.round(k*d+f*b+c)};m.prototype.addVertex=function(g,b,a,c,d){var f="",k=b.isDisplacedLabel()||b.isRotatedLabel();