cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations (SEC-265).Referenceshttps://documentation.cpanel.net/display/CL/66+Change+Log
