OpenWay WAY4 ACS before 1.2.278-2693 allows XSS via the /way4acs/enroll action parameter.
Published October 11, 2021.
Openwaygroup Way4