Code injection

cPanel before 64.0.21 allows a Webmail account to execute code via forwarders SEC-240...