CVE-2021-36397

In Moodle, insufficient capability checks meant message deletions were not limited to the current user...