The vulnerability of the checkExtractItems() method in the elFinderVolumeDriver.class.php file of the elFinder file manager allows a hacker to execute arbitrary code.

The vulnerability of the checkExtractItems method in the elFinderVolumeDriver.class.php file of the elFinder file manager allows for unlimited downloading of malicious files. Exploiting this vulnerability could enable a remote attacker to execute arbitrary code...