[LOW] Moodle does not set the RISK_XSS bit for graders

PKSA-rmg8-16vw-9cwj CVE-2015-0216 GHSA-2jcw-r79x-4r5v

Affected package: moodle/moodle

Affected version: >=2.8.0,<2.8.2

Reported by:
GitHub