cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-374).Referenceshttps://documentation.cpanel.net/display/CL/70+Change+Log
