• Security: Authenticated (Contributor+) Stored Cross-Site Scripting, reported by Peter Thaleikis