Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxResources.get("pageWithNumber",[ha+1]),mxUtils.write(na,ea),na.setAttribute("title",ea+" ("+N[ha].getAttribute("id")+")"),na.setAttribute("value",ha),ha==H&&na.setAttribute("selected","selected"),O.appendChild(na);V=function(){try{var Ba=parseInt(O.value);H=L=Ba;za(N[Ba])}catch(ba){O.value=L,b.handleError(ba)}}}else Ca(ea);ha=W.lastModifyingUserName;null!=ha&&20<ha.length&&(ha=ha.substring(0,20)+"...");D.innerText="";mxUtils.write(D,(null!=ha?ha+" ":"")+X.toLocaleDateString()+" "+X.toLocaleTimeString());