Critical severity9.8NVD Advisory· Published Jul 30, 2021· Updated Jun 17, 2026
CVE-2021-30124
CVE-2021-30124
Description
The unofficial vscode-phpmd (aka PHP Mess Detector) extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- PHP Mess Detector/vscode-phpmddescription
- Range: <1.3.0
- Range: <1.3.0
- cpe:2.3:a:vscode-phpmd_project:vscode-phpmd:*:*:*:*:*:visual_studio_code:*:*Range: <1.3.0
Patches
Vulnerability mechanics
References
3- github.com/sandhje/vscode-phpmd/commit/c462bf5c6f0160d0199855d5f8ed76be8d9beac0nvdPatchThird Party Advisory
- vuln.ryotak.me/advisories/25nvdThird Party Advisory
- marketplace.visualstudio.com/itemsnvdProduct
News mentions
0No linked articles in our index yet.