cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration (SEC-383).Referenceshttps://documentation.cpanel.net/display/CL/68+Change+Log