Description cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer (SEC-386). References https://documentation.cpanel.net/display/CL/68+Change+Log