Description
The unofficial vscode-phpmd (aka PHP Mess Detector) extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder.
Unscored
CVE-2021-30124
EUVD-2021-17064GHSA-x738-gr3m-69cq
The unofficial vscode-phpmd (aka PHP Mess Detector) extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitr…
Published Jul 29, 2021 · Updated Aug 3, 2024 · Assigned by mitre