[MEDIUM] REDAXO: Unwhitelisted ORDER BY Column in rex_list Allows Authenticated Column Enumeration

PKSA-61tb-yjv2-q4wp CVE-2026-62998 GHSA-4f5f-j737-pm58

Affected package: redaxo/source

Affected version: <=5.21.1

Reported by:
GitHub