org.xwiki.contrib:discussions-server has Cross-Site Request Forgery (CSRF) issue that makes it possible to delete messages
Maven org.xwiki.contrib:discussions-server · Upgrade to 2.0-rc-1 (pre-release) or later · < 2.0-rc-1 · CVE-2023-37465 · GHSA-4j38-rw27-97gx · amended