Looks like the field name is desc and not descr, so it isn't getting the same protection against that as the other description fields. Shouldn't be too hard to fix.
EDIT: I reopened the original ticket for this and added the details of what is going on here: http://redmine.pfsense.org/issues/320