PropertyMax Pro FREE is prone to multiple remote vulnerabilities, including an authentication bypass vulnerability and a cross-site scripting vulnerability. The authentication bypass vulnerability occurs because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to bypass authentication and gain access to the application. The cross-site scripting vulnerability occurs because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker can exploit this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.