Description cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370). References https://documentation.cpanel.net/display/CL/70+Change+Log