Vulnerable projects specs: fix descriptions

What does this MR do?

It fixes a couple of test descriptions within the vulnerable-projects mutations specs.

Does this MR meet the acceptance criteria?

Conformity

• Changelog entry
• Documentation (if required)
• Code review guidelines
• Merge request performance guidelines
• Style guides
• Database guides
• Separation of EE specific content