CVE-2009-1951: Propertymaxpro Propertymax Pro Free

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in index.php in PropertyMax Pro FREE 0.3 allows remote attackers to inject arbitrary web script or HTML via the pl parameter in a mi action.

Affected products

• Propertymaxpro Propertymax Pro Free: version 0.3 only

Published 2009-06-05. Last modified 2026-06-16.