youtube-php-mirroring (last update Jun 9, 2017) is affected by a Cross Site Scripting (XSS) vulnerability in file ytproxy/index.php.Referenceshttps://github.com/zxq2233/youtube-php-mirroring/issues/3