Submitty before v22.06.00 is vulnerable to Incorrect Access Control. An attacker can delete any post in the forum by modifying request parameter.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-43194.json"