EUVD-2026-85332

REDAXO: Unwhitelisted ORDER BY Column in rexlist Allows Authenticated Column Enumeration...

CVE-2026-62998

REDAXO is a PHP-based content management system. Prior to 5.21.2, rexlist::getSortColumn in redaxo/src/core/lib/list.php accepts the sort request parameter without checking whether setColumnSortable registered the requested column. An authenticated backend user can make prepareQuery add an escape...