Description A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field. Remediation References CVE-2022-30597 Related Vulnerabilities TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47760) Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2024-1635) WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Request Forgery (4.2.3.1) WordPress Plugin W3 Total Cache Backdoor (0.9.2.2) phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-6300) Severity Medium Classification CVE-2022-30597 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Tags Missing Update Known Vulnerabilities