Description cPanel before 68.0.15 allows stored XSS during a cpaddons moderated upgrade (SEC-336). References https://documentation.cpanel.net/display/CL/68+Change+Log