cPanel before 62.0.4 allows self XSS on the webmail Password and Security page (SEC-199).Referenceshttps://documentation.cpanel.net/display/CL/62+Change+Log
