MCQ/MSQ/ConstSum questions are vulnerable to XSS #2768

Fixes #2768