In reply to Armin.

The original report suggests that the injected JavaScript will not be triggered on the admin dashboard. If correct, you could continue to use your admin account so long as you don't publish and view the malicious comment. I've personally not tested that theory however.