Openwaygroup Way4 vulnerabilities

• openwaygroup way4 /way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to... CVE-2021-35060 5.3 MediumOctober 11, 2021
• openwaygroup way4 OpenWay WAY4 ACS before 1.2.278-2693 allows XSS via the /way4acs/enroll action parameter. CVE-2021-35059 6.1 MediumOctober 11, 2021