WordPress Google Calendar Events 2.0.1 Cross Site Scripting

WordPress Google Calendar Events plugin version 2.0.1 suffers from a cross site scripting vulnerability.