Code injection

cPanel before 64.0.21 allows demo accounts to execute code via an ImageManagerdimensions API call SEC-243...