Summary

Netsparker identified a cookie used as Anti-CSRF Token.

Impact
During a cross-site scripting attack, an attacker might easily access cookies and hijack the victim's session even if cookie is marked as HttpOnly. If the cookie is not the session cookie you can ignore this issue.
Remediation
Avoid the usage of session cookie as Anti-CSRF Token.
Classifications
OWASP 2013-A5