Design/Logic Flaw

proberv.php in Yahei-PHP Proberv 0.4.7 has XSS via the funName parameter...