Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
f.getId(),f)}a=function(k){null==k.entries&&(k.entries=[]);return k.entries}(this.pages);for(c=0;c<a.length;c++)f=a[c].getValue(),d=f.getBackPageId(),null!=d&&(d=function(k,n){null==k.entries&&(k.entries=[]);for(var p=0;p<k.entries.length;p++)if(null!=k.entries[p].key.equals&&k.entries[p].key.equals(n)||k.entries[p].key===n)return k.entries[p].value;return null}(b,d),f.setBackPage(d))}break}b=b.nextSibling}}};g.prototype.getPages=function(){return this.pages};g.prototype.getThemes=function(){return this.themes};