[MEDIUM] REDAXO: Stored XSS via Unescaped Media Manager Type Name in `mediaIsInUse()`

PKSA-hspm-hyxh-6wd5 CVE-2026-63001 GHSA-mf2p-wjp4-99pq

Affected package: redaxo/source

Affected version: <=5.21.1

Reported by:
GitHub