Security Advisory
CVE-2021-30124
9.8
CRITICAL
Vulnerability Description
The unofficial vscode-phpmd (aka PHP Mess Detector) extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder.
Published Date
July 30, 2021
Official Source
NIST NVD Advisory