How to prevent drupal module files from Reflected Cross Site Scripting

After scanning from testing tool we found below drupal's files Reflected Cross Site Scripting

index-with-imagick.php
page_manager.admin.inc
facebook_pages.php
login.php
timeline.php
widget\index.php
menu.php
special_textscroller.php
hybrid\auth.php
hybridauth\install.php
php\index.php
social_hub\profile.php
social_hub\status.php
class.krumo.php

Please help me to provide the solution for How to prevent drupal's files from Reflected Cross Site Scripting?