cPanel before 82.0.15 allows self XSS in the SSL Key Delete interface (SEC-526).
Published October 9, 2019.
Cpanel Cpanel