Language: PHP
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function easySelectD($query) {

    global $table_prefeix;	// table prefix;
    global $conn;			// MySQL connection variable.
    $dataFromDB = [];

    /* echo $query;
    exit(); */
    // Run the query and store the result into getResult variable.
    $getResult = $conn->query($query);

    // Check If the syntax has any error then throw an the error.
    if($getResult === false) {

        // insert log 
        create_log($conn->error, debug_backtrace());

        // Keep the transaction error record
        $conn->get_all_error[] = $conn->error;

        return $conn->error; // Return the error
    }

    // Check if there is more then Zero (0) result.
    if($getResult->num_rows > 0) {
        
        // return all data in array format
        return array(
            "count" => $getResult->num_rows,
            "data" => $getResult->fetch_all(true)
        );

    } else {
        // Return false if there is no data.
        return false;
    }

}