TI-2021-10672 CVE-2021-30124 · GHSA-x738-gr3m-69cqThe unofficial vscode-phpmd (aka PHP Mess Detector) extension before 1.3.0 for Visual…Priority MEDIUM 48The unofficial vscode-phpmd (aka PHP Mess Detector) extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder.CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03049 · Published 2021-07-29 · No fix listed