Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
!1;v.connectionHandler.createEdgeState=function(g){g=v.createEdge(null,null,null,null,null,E);return new mxCellState(this.graph.view,g,this.graph.getCellStyle(g))};var F=v.getDefaultParent(),L=mxUtils.bind(this,function(g){var q=new mxCellOverlay(this.connectImage,"Add outgoing");q.cursor="hand";q.addListener(mxEvent.CLICK,function(p,t){v.connectionHandler.reset();v.clearSelection();var x=v.getCellGeometry(g),B;R(function(){B=v.insertVertex(F,null,"Entry",x.x,x.y,80,30,"rounded=1;");L(B);v.view.refresh(B);