Thanks,
I rolled back my site database to before the hack which got my reviews back then Ive updated to the latest version of the plugin.
I believe I was running a slightly outdated version.
Looks to be some form of exploit which allows injection of code into the custom CSS rules.