Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
EditorUi.prototype.removePage=function(b){try{var e=this.editor.graph,g=mxUtils.indexOf(this.pages,b);if(e.isEnabled()&&0<=g){this.editor.graph.isEditing()&&this.editor.graph.stopEditing(!1);e.model.beginUpdate();try{var p=this.currentPage;p==b&&1<this.pages.length?(g==this.pages.length-1?g--:g++,p=this.pages[g]):1>=this.pages.length&&(p=this.insertPage(),e.model.execute(new RenamePage(this,p,mxResources.get("pageWithNumber",[1]))));e.model.execute(new ChangePage(this,b,p))}finally{e.model.endUpdate()}}}catch(y){this.handleError(y)}return b};