D7ES PSA relating to 7.x elFinder file manager

The 7.x branch of elFinder file manager contains at least one known security issue with its upstream dependencies that the Drupal project has not addressed. 

For more information, see https://github.com/Studio-42/elFinder/security/advisories/GHSA-wm5g-p99q-66g4, https://github.com/Studio-42/elFinder/security/advisories/GHSA-qm58-cvvm-c5qr, and https://github.com/Studio-42/elFinder/security/advisories/GHSA-wph3-44rj-92pr.

Solution:

If you use this project, it is recommended that you uninstall it. Alternatives to this module include, among others, https://www.drupal.org/project/imce.