IFrame Injection Vulnerability Web Application Vulnerability XSS Injection Weather.com is vulnerable to Iframe Injection Tuesday, September 27, 2011 Weather.com is vulnerable to Iframe Injection. weather.com provide a national and local weather forecast for cities, as well as weather radar, report and hurricane.