XWiki-5513 : Unprivileged users can make arbitrary select queries with DatabaseListProperty.

I propose to use the query manager instead of the old insecure xwiki.search(). Unprivileged users won't be able to make full form statement queries anymore.