Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
parseFloat(c):-1,d=!1);this.findToPart(b,d)};g.prototype.findToPart=function(b,a){b=b.getAttribute(h.mxgraph.io.vsdx.mxVsdxConstants.TO_PART);b=null!=b&&0!==b.length?parseFloat(b):-1;a?this.sourceToPart=b:this.targetToPart=b};g.prototype.getFromSheet=function(){return this.fromSheet};g.prototype.getSourceToSheet=function(){return this.sourceToSheet};g.prototype.getTargetToSheet=function(){return this.targetToSheet};g.prototype.getSourceToPart=function(){return this.sourceToPart};g.prototype.getTargetToPart=