There is Stored XSS in Subrion 4.2.1 via the admin panel URL configuration.
intelliants subrion 4.2.1