Input validation vulnerability in Feeds for YouTube (YouTube video, channel, and gallery plugin) 2.1

The Feeds for YouTube for WordPress plugin for WordPress is vulnerable to a security issue that has been identified in versions up to, and including, 2.1. This issue makes it possible for people with certain levels of access to a website to inject malicious code into pages that will then execute whenever any user opens the page. This code injection is possible due to a lack of protection against malicious input and inadequate protection of output.