Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
C[e].s||null!=C[e].e&&C[e].e<t.length||"t"==C[e].n||"ac"==C[e].n||"lk"==C[e].n){G=!0;break}if(G=G||F)return B(t,C,u)}catch(N){console.log(N)}t=t.replace(/</g,"&lt;");return t=t.replace(/>/g,"&gt;")}if(null!=C.Value&&null!=C.Value.t)return C.Value.t=C.Value.t.replace(/</g,"&lt;"),C.Value.t=C.Value.t.replace(/>/g,"&gt;"),C.Value.t}return""}function g(u){return null!=u.Action?u.Action:u}function b(u){if(null!=u.Text){if(null!=u.Text.m)return u.Text.m}else if(null!=u.TextAreas){if(null!=u.TextAreas.Text&&