CVE-2018-15563

core/admin/pages/add/ in Subrion CMS 4.2.1 has XSS via the titlesen parameter...