Two stored cross-site scripting vulnerabilities have been fixed. Both required elevated privileges to exploit.