Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
y.init()}else{var C=function(L){return{id:L.id,isExt:!0,url:L.downloadUrl,title:L.title,imgUrl:L.thumbnailLink,changedBy:L.lastModifyingUserName,lastModifiedOn:L.modifiedDate}};p=new TemplatesDialog(c,function(L,m,z){var J=z.libs,O=z.clibs;c.pickFolder(c.mode,function(T){c.createFile(m,L,null!=J&&0<J.length?J:null,null,function(){c.hideDialog()},null,T,null,null!=O&&0<O.length?O:null)},null==c.stateArg||null==c.stateArg.folderId)},null,null,null,"user",function(L,m,z){var J=new Date;J.setDate(J.getDate()-