medium6.1
CVE-2021-35059
OpenWay WAY4 ACS before 1.2.278-2693 allows XSS via the /way4acs/enroll action parameter.
Impact
OpenWay WAY4 ACS before 1.2.278-2693 allows XSS via the /way4acs/enroll action parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openwaygroup | Way4 | before 1.2.278-2693 |