[LOW] Moodle does not set the RISK_XSS bit for graders

PKSA-kfnw-tfjj-6p3n CVE-2015-3174 GHSA-6r7x-6q98-qcqp

Affected package: moodle/moodle

Affected version: >=2.8.0,<2.8.6|>=2.7.0,<2.7.8|<2.6.11

Reported by:
GitHub