CVE-2020-9405

CVE-2020-9405

IBL Online Weather before 4.3.5a allows unauthenticated reflected XSS via the redirect page.

Source: CVE-2020-9405