Phprunner 9 still using YUI version 3.7.2.
Is it compatible to manually upgrade to YUI 3.18.1?
Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.0.0 through 3.9.1, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL.