org.xwiki.contrib:discussions-server has Cross-Site Request Forgery (CSRF) issue that makes it possible to delete messages
It's possible to forge a request to delete a message.
Advisories for Maven/Org.xwiki.contrib/Discussions-Server package
2026
It's possible to forge a request to delete a message.