SourceCodester SEO Meta Tag Extractor 1.0 contains an SSRF vulnerability in the get_headers function of /index.php. By manipulating the url parameter, an attacker can induce the server to send crafted requests to arbitrary destinations. This vulnerability is remotely exploitable and has been publicly disclosed. No official patch or remediation guidance is currently available from the vendor, and no known exploits have been observed in the wild.

Successful exploitation allows an attacker to make the vulnerable server perform arbitrary HTTP requests. This can lead to information disclosure or interaction with internal systems not directly accessible to the attacker. The impact is rated medium based on the CVSS 4.0 score of 6.9.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vulnerable functionality and validate or sanitize user-supplied URL inputs to prevent SSRF exploitation.