I use this standard for some time (i.e., ([vendor ]product[ version]) (function|functionality) (vulnerability_type)), see my previous modules. This helps to differentiate, for example, when another module that also exploits a code injection vulnerability in this same product is added. I wouldn't like to change this if not strict necessary as I've a few more modules in the queue for this and other products that use this same convention.