Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
q.init()}else{var C=function(J){return{id:J.id,isExt:!0,url:J.downloadUrl,title:J.title,imgUrl:J.thumbnailLink,changedBy:J.lastModifyingUserName,lastModifiedOn:J.modifiedDate}};p=new TemplatesDialog(c,function(J,G,P){var O=P.libs,N=P.clibs;c.pickFolder(c.mode,function(T){c.createFile(G,J,null!=O&&0<O.length?O:null,null,function(){c.hideDialog()},null,T,null,null!=N&&0<N.length?N:null)},null==c.stateArg||null==c.stateArg.folderId)},null,null,null,"user",function(J,G,P){var O=new Date;O.setDate(O.getDate()-