cPanel before 90.0.17 has multiple instances of URL parameter injection (SEC-567).
mitre·CWE-838·Published 2020-11-27