WordPress Customize Youtube Videos 0.2 Cross Site Scripting

WordPress Customize Youtube Videos plugin version 0.2 suffers from cross site scripting vulnerabilities.