Like they said above, there are webDAV exploits in XAMPP. Delete that. Also, switch to IIS, as XAMPP is mainly used for small scale testing of php websites, not for big CMS handling sites.
Yes, you truly don't know. The WebDAV exploit allows users to upload shells to your site, and is able to do harmful damage to your system, they could even delete your System32 folder, which could be very painful for your computer, causing it to not even start up. Edit your .htaccess or buy security, other than that, don't bother trying.