cPanel prior to 68.0.27 allows self XSS in WHM Apache Configuration Include Editor (SEC-385).
cpanel cpanel