cPanel prior to 74.0.8 allows self XSS in the Site Software Moderation interface (SEC-434).
cpanel cpanel