The wp-polls plugin prior to 2.73.1 for WordPress has XSS via the Poll bar option.
wp-polls project wp-polls