Code injection

cPanel before 90.0.17 has multiple instances of URL parameter injection SEC-567...