CVE-2013-0129
Pd-admin < 4.16 - XSS
Title source: ruleDescription
Multiple cross-site scripting (XSS) vulnerabilities in pd-admin before 4.17 allow remote authenticated users to inject arbitrary web script or HTML via (1) the WebFTP Overview "Create new directory" field or (2) the body of an e-mail autoresponder message.
Scores
EPSS
0.0021
EPSS Percentile
43.5%
Details
CWE
CWE-79
Status
published
Products (2)
pd-admin/pd-admin
< 4.16
n/a/n/a
Published
Apr 19, 2013
Tracked Since
Feb 18, 2026