CVE-2013-0129: Multiple cross-site scripting (XSS) vulnerabilities in pd-admin before 4.17 allow remote authenticated user...

Security readout for executives and security teams

CVE-2013-0129 affects pd-admin before 4.17. Authenticated users could inject script or HTML through WebFTP directory creation or email autoresponder message content. This can expose administrator sessions or alter what other users see, but the public bundle does not provide CVSS, confirmed exploitation, or detailed impact. Exposure is limited to organizations running pd-admin versions earlier than 4.17, especially where untrusted or lower-privileged authenticated users can access WebFTP or autoresponder configuration features. Treat this as a focused remediation item, not a broad emergency. Prioritize if pd-admin is internet-facing, shared with many authenticated users, or used by hosting customers. Mitigation focus: Inventory pd-admin deployments and identify any versions earlier than 4.17.; Upgrade affected pd-admin installations to 4.17 or later if vendor guidance confirms that path.; Restrict pd-admin access to trusted administrators until remediation is complete..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.