During a cross-site scripting attack, an attacker might easily access cookies and hijack the victim's session even if cookie is marked as HttpOnly. If the cookie is not the session cookie you can ignore this issue.
By using this website you agree with our use of cookies to improve its performance and enhance your experience. More information in our Privacy Policy.