Security implications of H5P in Moodle 3.9