Allow [] default for Mdm:WebVuln#params

[#44034071]

Mdm::WebVuln#params was supposed to have a default of [], but its
serialzier had a hard-coded default of {}.  Support was added to the
serializer to allow different defaults and in-memory params was
normalized to [] if set or read as nil.