Description cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action (SEC-410). References https://documentation.cpanel.net/display/CL/70+Change+Log