CVE-2020-24142

CVE-2020-24142 involves the WordPress plugin Video Downloader for TikTok (aka downloader-tiktok) up to version 1.3. The Red Hat and NVD entries confirm a server-side request forgery (SSRF) in the njt-tk-download-video parameter that allows an attacker to cause the vulnerable web app to issue craf...