Broken Access Control in extension "gForum" (g_forum)

The extension fails to check access rights of authenticated frontend users allowing to create, edit and delete various records of the extension without proper permission...