The Weather Channel weather.com Almost All Links Vulnerable to XSS Attacks
Almost all links under the domain weather.com are vulnerable to XSS attacks. Attackers just need to add script at the end of The Weather Channel's URLs. Then the scripts will be executed.
Wang Jing, School of Physical and Mathematical Sciences, Nanyang Technological University, Singapore.