Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"wrap";var x=h.mxgraph.io.vsdx.mxVsdxUtils.getStyleString(n,"=");n=null;var z=b.getChildShapes();n=null!=z&&0<function(J){null==J.entries&&(J.entries=[]);return J.entries.length}(z);p=b.isDisplacedLabel()||b.isRotatedLabel()||n;n=b.getOriginPoint(d,!0);if(p)n=g.insertVertex(a,null,null,Math.floor(Math.round(100*n.x)/100),Math.floor(Math.round(100*n.y)/100),Math.floor(Math.round(100*f.x)/100),Math.floor(Math.round(100*f.y)/100),x);else{var E=b.getTextLabel();n=g.insertVertex(a,null,E,Math.floor(Math.round(100*