Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
g.prototype.extractThemeIndex=function(b){b=h.mxgraph.io.vsdx.mxVsdxUtils.getDirectFirstChildElement(b);null!=b&&(this.themeIndex=parseInt(b.getAttribute("schemeEnum")))};g.prototype.addBasicColor=function(b,a){this.baseColors[b]=h.mxgraph.io.vsdx.theme.OoxmlColorFactory.getOoxmlColor(a)};g.prototype.getSchemeColor=function(b){this.processTheme();var a=this.baseColors;b=a[b]?a[b]:null;return null!=b?b.getColor$com_mxgraph_io_vsdx_mxVsdxTheme(this):this.defaultClr};g.prototype.getStyleColor=function(b){this.processTheme();