_core/admin/pages/add/ in Subrion CMS 4.2.1 has XSS via the titles[en] parameter.
intelliants subrion 4.2.1