cPanel prior to 82.0.2 has Self XSS in the cPanel and webmail master templates (SEC-506).
cpanel cpanel