The host is installed with Apple Mac OS 11 before 11.3 or Apple Safari before 14.1 on MacOS Mojave or MacOS Catalina and is prone to a cross site scripting vulnerability. A flaw is present in the application, which fails to handle an input validation issue. Successful exploitation allows attackers to perform a cross site scripting attack.