cPanel prior to 11.54.0.4 allows stored XSS in the WHM Feature Manager interface (SEC-86).
cpanel cpanel