cPanel before 78.0.18 allows demo accounts to execute code via securitypolicy.cg (SEC-487).Referenceshttps://documentation.cpanel.net/display/CL/78+Change+Log
