CVE-2020-35129

CVE-2020-35129 is a stored Cross-Site Scripting (XSS) vulnerability affecting Mautic versions prior to 3.2.4. An authenticated attacker with access to the Social Monitoring feature can inject malicious JavaScript, potentially compromising other users, including administrators. This critical vulnerability (CVSS 9.0) allows for high impact, including account takeover, password changes, and privilege escalation from a low-privileged user to an administrator. There is currently no public exploit intelligence, active exploitation, or significant community discussion surrounding this CVE.