Description cPanel before 60.0.25 allows self stored XSS in the listftpstable API (SEC-178). References https://documentation.cpanel.net/display/CL/60+Change+Log