cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences (SEC-96).Referenceshttps://documentation.cpanel.net/display/CL/56+Change+Log