CVE-2026-28226 | phishingclub Phishing Club up to 1.30.1 Endpoint RemapOrderBy sortBy sql injection (GHSA-4r69-4qff-ccj3)

A vulnerability labeled as critical has been found in phishingclub Phishing Club up to 1.30.1. The affected element is the function RemapOrderBy of the component Endpoint. Such manipulation of the argument sortBy leads to sql injection.

This vulnerability is traded as CVE-2026-28226. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.