Stored Xss on bugzilla.mozilla.org via comment edit feature from non-admin to admin.