Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
!p){var O=function(){K.value=Math.max(1,Math.min(G,Math.max(parseInt(K.value),parseInt(m.value))));m.value=Math.max(1,Math.min(G,Math.min(parseInt(K.value),parseInt(m.value))))},N=c.addRadiobox(q,"pages",mxResources.get("allPages"),!0),T=c.addRadiobox(q,"pages",mxResources.get("pages")+":",!1,null,!0),m=document.createElement("input");m.style.cssText="margin:0 8px 0 8px;";m.setAttribute("value","1");m.setAttribute("type","number");m.setAttribute("min","1");m.style.width="50px";q.appendChild(m);var B=