Description cPanel before 90.0.10 allows self XSS via WHM Manage API Tokens interfaces (SEC-569). References https://docs.cpanel.net/changelogs/90-change-log/