The Cpanel file manager in version 11.24.4-CURRENT suffers from multiple cross site scripting vulnerabilities.