Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxResources.get("pageWithNumber",[da+1]),mxUtils.write(ma,ea),ma.setAttribute("title",ea+" ("+D[da].getAttribute("id")+")"),ma.setAttribute("value",da),da==z&&ma.setAttribute("selected","selected"),N.appendChild(ma);T=function(){try{var Ca=parseInt(N.value);z=E=Ca;za(D[Ca])}catch(ba){N.value=E,b.handleError(ba)}}}else Ba(ea);da=V.lastModifyingUserName;null!=da&&20<da.length&&(da=da.substring(0,20)+"...");G.innerText="";mxUtils.write(G,(null!=da?da+" ":"")+X.toLocaleDateString()+" "+X.toLocaleTimeString());