Summary: IBL Online Weather before 4.3.5a allows unauthenticated reflected XSS via the redirect page.Published: Wednesday, February 26, 2020 - 00:15cvss: 5.0