A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field.
CWE-472, NVD-CWE-Other