CVE-2022-30597: External Control of Assumed-Immutable Web Parameter

A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field...