An unauthenticated Cross Site Scripting (XSS) vulnerability exists in Easy Property Listings versions up to and including 3.5.25. This vulnerability allows an attacker to execute malicious scripts in the context of the affected application without requiring authentication.