Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
n.init()}else{var z=function(C){return{id:C.id,isExt:!0,url:C.downloadUrl,title:C.title,imgUrl:C.thumbnailLink,changedBy:C.lastModifyingUserName,lastModifiedOn:C.modifiedDate}};l=new TemplatesDialog(d,function(C,D,M){var K=M.libs,O=M.clibs;d.pickFolder(d.mode,function(V){d.createFile(D,C,null!=K&&0<K.length?K:null,null,function(){d.hideDialog()},null,V,null,null!=O&&0<O.length?O:null)},null==d.stateArg||null==d.stateArg.folderId)},null,null,null,"user",function(C,D,M){var K=new Date;K.setDate(K.getDate()-