XSS worm on my InfinityFree site?

please elaborate why the point is to prevent embedding to other websites such as youtube and gofundme.