See how no-cms project compares to other vendors in security performance
No-CMS 1.1.3 is prone to Persistent XSS via a contactus name parameter, as demonstrated by the VG48Z5PqVWname parameter.
No-CMS 1.1.3 is prone to Persistent XSS via the blog/managearticle/index/ "articletitle" parameter.
No-CMS 1.1.3 is prone to Persistent XSS via the blog/managearticle "keyword" parameter.