proberv.php in Yahei-PHP Proberv 0.4.7 has XSS via the funName parameter.
yahei yahei php prober 0.4.7