Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
v.init()}else{var B=function(H){return{id:H.id,isExt:!0,url:H.downloadUrl,title:H.title,imgUrl:H.thumbnailLink,changedBy:H.lastModifyingUserName,lastModifiedOn:H.modifiedDate}};m=new TemplatesDialog(d,function(H,g,x){var F=x.libs,M=x.clibs;d.pickFolder(d.mode,function(P){d.createFile(g,H,null!=F&&0<F.length?F:null,null,function(){d.hideDialog()},null,P,null,null!=M&&0<M.length?M:null)},null==d.stateArg||null==d.stateArg.folderId)},null,null,null,"user",function(H,g,x){var F=new Date;F.setDate(F.getDate()-