Description cPanel before 84.0.20 allows stored self-XSS via the HTML file editor (SEC-535). References https://documentation.cpanel.net/display/CL/84+Change+Log