Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
b.entries&&(b.entries=[]);for(var d=0;d<b.entries.length;d++)if(null!=b.entries[d].key.equals&&b.entries[d].key.equals(a)||b.entries[d].key===a){b.entries[d].value=c;return}b.entries.push({key:a,value:c,getKey:function(){return this.key},getValue:function(){return this.value}})})(g.colorIds_$LI$(),7,"accent6")};g.prototype.getThemeIndex=function(){return this.themeIndex};g.prototype.setVariant=function(b){this.themeVariant=b};g.prototype.isPure=function(){return this.__isPure};g.prototype.processTheme=