cPanel prior to 88.0.13 mishandles file-extension dispatching, leading to code execution (SEC-488).
cpanel cpanel