cPanel prior to 11.54.0.4 allows self XSS in the WHM PHP Configuration editor interface (SEC-84).
cpanel cpanel