Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
X.getCellAt(eb.getGraphX(),eb.getGraphY())||oa.cell;X.graphHandler.selectCellForEvent(jb,eb)}kb=0};$a.positionChanged=function(){};$a.reset=function(){kb=0};x.push($a)})(ea)}}return null!=x?x.reverse():null};var C=mxVertexHandler.prototype.setHandlesVisible;mxVertexHandler.prototype.setHandlesVisible=function(x){C.apply(this,arguments);if(null!=this.moveHandles)for(var L=0;L<this.moveHandles.length;L++)null!=this.moveHandles[L]&&(this.moveHandles[L].node.style.visibility=x?"":"hidden");if(null!=this.cornerHandles)for(L=