CVE-2025-3635: CSRF in Moodle Tour Duplication | NextGuard