MeteoTemplate version 17.1 with Nectarine globalSnow plugin version 1.1 suffers from an open redirection vulnerability.