[RSS Feed/News] Inline moderation loophole: Moderators can move posts to threads they can't access

[XenForo]

A moderator that only has permissions

• Use inline moderation on threads / posts
• Manage (move, merge, etc.) any thread

can move posts from a normally visible thread to a deleted or moderated thread, effectively removing them from public view.

This doesn't seem like smth. that would be expected, especially as merging a normal and a deleted thread does not work.

ادامه مطلب...