A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field.
{
"severity": "Medium",
"cpes": [
"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
"cpe:2.3:a:moodle:moodle:4.0.0:-:*:*:*:*:*:*"
]
}