Sorry, it's of course a stored XSS and not a reflected one.