_core/admin/pages/add/ in Subrion CMS 4.2.1 has XSS via the titles[en] parameter.
- https://cxsecurity.com/issue/WLB-2018090261
No PoCs found on GitHub currently.