See how icecms project compares to other vendors in security performance
IceCMS v1.0.0 has Insecure Permissions. There is unauthorized access to the API, resulting in the disclosure of sensitive information.
IceCMS v1.0.0 is vulnerable to Cross Site Scripting (XSS).
An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting.