PatchTheCVE: online weatherhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-9407: IBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the IWEBSERVICE_Jhttps://patchthecve.com/cve/CVE-2020-9407.htmlhttps://patchthecve.com/cve/CVE-2020-9407.htmlWed, 17 Jun 2026 03:27:53 +0000MEDIUM 5.3: IBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the IWEBSERVICE_JSONRPC_COOKIE cookie.CVE-2020-9406: IBL Online Weather before 4.3.5a allows unauthenticated eval injection via the queryBCP method of the Auxiliarhttps://patchthecve.com/cve/CVE-2020-9406.htmlhttps://patchthecve.com/cve/CVE-2020-9406.htmlWed, 17 Jun 2026 03:27:53 +0000CRITICAL 9.8: IBL Online Weather before 4.3.5a allows unauthenticated eval injection via the queryBCP method of the Auxiliary Service.CVE-2020-9405: IBL Online Weather before 4.3.5a allows unauthenticated reflected XSS via the redirect page.https://patchthecve.com/cve/CVE-2020-9405.htmlhttps://patchthecve.com/cve/CVE-2020-9405.htmlWed, 17 Jun 2026 03:27:53 +0000MEDIUM 6.1: IBL Online Weather before 4.3.5a allows unauthenticated reflected XSS via the redirect page.