Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
g.prototype.extractThemeIndex=function(b){b=h.mxgraph.io.vsdx.mxVsdxUtils.getDirectFirstChildElement(b);null!=b&&(this.themeIndex=parseInt(b.getAttribute("schemeEnum")))};g.prototype.addBasicColor=function(b,a){this.baseColors[b]=h.mxgraph.io.vsdx.theme.OoxmlColorFactory.getOoxmlColor(a)};g.prototype.getSchemeColor=function(b){this.processTheme();var a=this.baseColors;b=a[b]?a[b]:null;return null!=b?b.getColor$com_mxgraph_io_vsdx_mxVsdxTheme(this):this.defaultClr};g.prototype.getStyleColor=function(b){this.processTheme();
if(8>b){var a=function(d,f){return d[f]?d[f]:null}(this.baseColors,function(d,f){null==d.entries&&(d.entries=[]);for(var k=0;k<d.entries.length;k++)if(null!=d.entries[k].key.equals&&d.entries[k].key.equals(f)||d.entries[k].key===f)return d.entries[k].value;return null}(g.colorIds_$LI$(),b));if(null!=a)return a.getColor$com_mxgraph_io_vsdx_mxVsdxTheme(this)}else if(8===b){if(null!=this.bkgndColor)return this.bkgndColor.getColor$com_mxgraph_io_vsdx_mxVsdxTheme(this)}else{a=null;var c=0;200<=b?c=b-200:
100<=b&&(c=b-100);0<=c&&6>=c&&(a=this.variantsColors[this.themeVariant][c]);if(null!=a)return a.getColor$com_mxgraph_io_vsdx_mxVsdxTheme(this)}return this.defaultClr};g.prototype.getFillGraientColor=function(b){return this.getFillColor$com_mxgraph_io_vsdx_theme_QuickStyleVals$boolean(b,!0)};g.prototype.getFillColor$com_mxgraph_io_vsdx_theme_QuickStyleVals=function(b){return this.getFillColor$com_mxgraph_io_vsdx_theme_QuickStyleVals$boolean(b,!1)};g.prototype.getFillColor$com_mxgraph_io_vsdx_theme_QuickStyleVals$boolean=