High severity7.2NVD Advisory· Published Jun 15, 2026· Updated Jun 15, 2026

CVE-2016-20066

Description

WordPress CP Polls 1.0.8 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through unsanitized file upload functionality. Attackers can upload files containing script payloads with event handlers like onerror attributes to execute arbitrary JavaScript in the browsers of users viewing the affected content.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Polls Cpllm-fuzzy
Range: =1.0.8
Package: https://wordpress.org/plugins/polls-cp

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/39513nvd
www.vulncheck.com/advisories/wordpress-cp-polls-persistent-cross-site-scriptingnvd

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000