Thank you for find these XSS vulnerabilities. They have been patched in the 1.0.3 version, released earlier this evening.