cPanel before 66.0.2 allows stored XSS during WHM cPAddons installation (SEC-263).Referenceshttps://documentation.cpanel.net/display/CL/66+Change+Log