diff --git a/mod/lesson/db/access.php b/mod/lesson/db/access.php
index 9e658dc4a48..8416860ae3d 100644
--- a/mod/lesson/db/access.php
+++ b/mod/lesson/db/access.php
@@ -54,7 +54,7 @@ $capabilities = array(
 
     // Grade essay questions.
     'mod/lesson:grade' => array(
-        'riskbitmask' => RISK_SPAM,
+        'riskbitmask' => RISK_SPAM | RISK_XSS,
         'captype' => 'write',
         'contextlevel' => CONTEXT_MODULE,
         'archetypes' => array(
diff --git a/mod/lesson/version.php b/mod/lesson/version.php
index 45062d4cca7..1d09326370a 100644
--- a/mod/lesson/version.php
+++ b/mod/lesson/version.php
@@ -24,7 +24,7 @@
 
 defined('MOODLE_INTERNAL') || die();
 
-$plugin->version   = 2014111001;       // The current module version (Date: YYYYMMDDXX)
+$plugin->version   = 2014111002;       // The current module version (Date: YYYYMMDDXX)
 $plugin->requires  = 2014110400;    // Requires this Moodle version
 $plugin->component = 'mod_lesson'; // Full name of the plugin (used for diagnostics)
 $plugin->cron      = 0;