Web Vulnerabilities Fix

I need to fix all the vulnerabilities what burp suite Professional find on my website.
Burp suite Professional ist a must to complete the job.
Pass all scan on my 2 websites.
I need it for today
Vulnerabilities what needs to be fixed:


1. Cross-site scripting (reflected)
2. Session token in URL
3. Client-side JSON injection (DOM-based)
4. Password field with autocomplete enabled
5. Client-side HTTP parameter pollution (reflected)
6. Unencrypted communications
7. Cross-origin resource sharing
8. Cross-origin resource sharing: arbitrary origin trusted
9. Cross-site request forgery
10. Duplicate cookies set
11. Input returned in response (reflected
12. Suspicious input transformation (reflected)
13. TLS cookie without secure flag set
14. Cross-domain Referer leakage
15. Cookie without HttpOnly flag set


17. Backup file
18. Email addresses disclosed

19. Cacheable HTTPS response

20. TLS certificate