The cp-polls plugin before 1.0.1 for WordPress has XSS in the votes list.Referenceshttps://wordpress.org/plugins/cp-polls/#developers