See how icecms project compares to other vendors in security performance
An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting.
IceCMS v1.0.0 has Insecure Permissions. There is unauthorized access to the API, resulting in the disclosure of sensitive information.
IceCMS v1.0.0 is vulnerable to Cross Site Scripting (XSS).