1.11.0: Closed CSRF hole in moderation commands