Description cPanel before 78.0.18 allows code execution via an addforward API1 call (SEC-480). References https://documentation.cpanel.net/display/CL/78+Change+Log