A vulnerability described as problematic has been identified in creativemindssolutions CM Custom Reports Plugin up to 1.2.7 on WordPress. This impacts an unknown function of the component Setting Handler. Executing a manipulation can lead to cross site scripting.
This vulnerability is tracked as CVE-2026-2432. The attack can be launched remotely. No exploit exists.
