XSS, CSRF, Clickjacking, Rate limit vulnerability fix in Dspace ver 6.0

Question

Pl advise how to fix the following vulnerabilities in D Space Version 6.0

1. Stored XSS - Cross-site scripting (also known as XSS) is a web security vulnerability which occurs when a malicious script is injected directly into a vulnerable web application cause of input validation.

2. Reflected XSS -- Reflected XSS is one of the part of Cross-Site-Scripting attacks and termed as “Non-Persistence XSS” or “Type II”. 3 Rate Limiting- number of wrong login attempts to be limited to 3 & then 15 mins wait

3. CSRF- cross site request forgery-

4. Click jacking - Thanks Rajiv