CVE-2023-29439

HIGH NUCLEI

FooPlugins FooGallery <= 2.2.35 - Unauthenticated Reflected Cross-Site Scripting

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2023-29439. PoCs published by LOURC0D3. A Nuclei detection template is also available.

AI-analyzed exploit summary This repository describes a reflected XSS vulnerability in the WordPress Foogallery plugin (versions 2.2.35 and earlier). The vulnerability arises from improper sanitization in the `foogallery_image_editor_modal` function, allowing unauthenticated attackers to inject malicious scripts via a crafted URL parameter.

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FooPlugins FooGallery plugin <= 2.2.35 versions.

Exploits (1)

nomisec WRITEUP 1 stars

by LOURC0D3 · poc

https://github.com/LOURC0D3/CVE-2023-29439

View Code ZIP pw:eip

This repository describes a reflected XSS vulnerability in the WordPress Foogallery plugin (versions 2.2.35 and earlier). The vulnerability arises from improper sanitization in the `foogallery_image_editor_modal` function, allowing unauthenticated attackers to inject malicious scripts via a crafted URL parameter.

Classification

Writeup 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: WordPress Foogallery Plugin <= 2.2.35

No auth needed

Prerequisites: Foogallery plugin installed and configured with Advanced Attachment Modal enabled

MITRE ATT&CK

T1059.007 - JavaScript

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Nuclei Templates (1)

FooGallery plugin <= 2.2.35 - Cross-Site Scripting

MEDIUMVERIFIEDby theamanrawat

Shodan: http.html:/wp-content/plugins/foogallery/

FOFA: body=/wp-content/plugins/foogallery/

References (2)

Core 2

Core References

Third Party Advisory vdb-entry

https://patchstack.com/database/vulnerability/foogallery/wordpress-foogallery-plugin-2-2-35-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve

Exploit, Third Party Advisory technical-description

https://lourcode.kr/posts/CVE-2023-29439-Analysis?_s_id=cve

Scores

CVSS v3 7.1

EPSS 0.0175

EPSS Percentile 74.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-79

Status published

Products (2)

fooplugins/foogallery < 2.2.35

FooPlugins/FooGallery < 2.2.35

Published May 16, 2023

Tracked Since Feb 18, 2026