XSS worm on my InfinityFree site?

The system specifically prevents embedding to other websites. That’s the whole point. If you sincerely believes this is malicious then please just find somewhere else that suits your needs.