A vulnerability classified as problematic was found in manchumahara CBX 5 Star Rating & Review Plugin up to 1.0.7 on WordPress. The affected element is an unknown function. Such manipulation of the argument page leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-6864. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.