Cross Site Scripting (XSS) vulnerability in the kk Star Ratings plugin prior to 4.1.5.
kamalkhan kk star ratings