description: IBL Online Weather before 4.3.5a allows unauthenticated reflected XSS via the redirect page.
metrics:
cvssV3_0: [
version: 3.0
vectorString: CVSS:3.0/AC:H/AV:N/A:L/C:L/I:L/PR:N/S:C/UI:R
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
baseScore: 5.8
baseSeverity: MEDIUM
]