The host is installed with Apple Mac OS 11.4 or Apple Safari before 14.1.1 on MacOS Mojave or MacOS Catalina and is prone to a universal cross site scripting vulnerability. A flaw is present in the application, which fails to properly handle a logic issue. Successful exploitation allows an attacker to cause universal cross site scripting while processing maliciously crafted web content.