WordPress Playlist for Youtube plugin version 1.32 suffers from a persistent cross site scripting vulnerability.