Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"#000000")),wa=mxUtils.setStyle(wa,mxConstants.STYLE_GRADIENTCOLOR,mxUtils.getValue(pa,mxConstants.STYLE_GRADIENTCOLOR,null)),P.getModel().isVertex(Aa[xa])&&(wa=mxUtils.setStyle(wa,mxConstants.STYLE_FONTCOLOR,mxUtils.getValue(pa,mxConstants.STYLE_FONTCOLOR,null))));P.getModel().setStyle(Aa[xa],wa)}}finally{P.getModel().endUpdate()}}));ba.className="geStyleButton";ba.style.width="36px";ba.style.height=10>=this.defaultColorSchemes.length?"24px":"30px";ba.style.margin="0px 6px 6px 0px";if(null!=Ba){var da=