CVE-2020-35129: Mautic stored Cross-site Scripting (XSS)

The vulnerability stems from improper input handling in Social Monitoring's title/name fields. The Controller action that processes form submissions (saveAction) and the Entity setter method (setTitle) that persists the data are critical points where input sanitization should occur. The Bishop Fox PoC demonstrates XSS execution via the monitoring[title] parameter, indicating these functions failed to validate()/escape user-controlled input before storage. The stored payloads then render unsafely in dashboard widgets and contact views, enabling privilege escalation attacks.