ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk.