Escape variables

Planist.php

@@ -4,7 +4,7 @@
  * Plugin Name:     Planist
  * Plugin URI: 		https://planist.live
  * Description:     Planist Shortcode and Block
- * Version:         1.0
+ * Version:         1.0.0
  * Author:          Parsa Kafi
  * Author URI: 		https://parsa.ws
  */
@@ -64,7 +64,7 @@ class Planist
         $style = apply_filters('planist_iframe_style', $style, $url);
 
 
-        return '<iframe src="' . $url . '" title="' . ucwords($username) . ' Booking Page" width="100%" height="100%" style="' . $style . '"></iframe>';
+        return '<iframe src="' . esc_url($url) . '" title="' . esc_attr(ucwords($username)) . ' Booking Page" width="100%" height="100%" style="' . $style . '"></iframe>';
     }
 }