Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
""}function Fe(u,F,C,t,e,N){if(null!=F&&null!=F.LinkX&&null!=F.LinkY&&(F.LinkX=Math.round(1E3*F.LinkX)/1E3,F.LinkY=Math.round(1E3*F.LinkY)/1E3,null!=N&&N.style&&-1<N.style.indexOf("flipH=1")&&(F.LinkX=1-F.LinkX),null!=N&&N.style&&-1<N.style.indexOf("flipV=1")&&(F.LinkY=1-F.LinkY),u.style+=(t?"":(C?"exitX":"entryX")+"="+F.LinkX+";")+(e?"":(C?"exitY":"entryY")+"="+F.LinkY+";")+(C?"exitPerimeter":"entryPerimeter")+"=0;",F.Inside))return"["+F.LinkX+","+F.LinkY+",0]"}function He(u,F,C,t,e){try{var N=function(ma,