Description
http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence </script> inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie value.
Remediation
References
Related Vulnerabilities
WordPress Plugin DX Share Selection Cross-Site Request Forgery (1.4)
WordPress Plugin Clik stats Open Redirect (0.8)
Oracle Application Server Other Vulnerability (CVE-2002-1089)
WordPress Plugin Video Metabox Cross-Site Scripting (1.1)
Apache Tomcat Improper Handling of Exceptional Conditions Vulnerability (CVE-2017-5664)