cPanel prior to 82.0.15 allows self stored XSS in the WHM SSL Storage Manager interface (SEC-527).
cpanel cpanel