Contao CMS allows to guarantee an adequate level of security because ?? ...

I have created with Contao (Vers 3.5) some websites for the Public Administration by adapting the template to the new Guidelines imposed by the AGID (Eg www.comune.arona.no.it).
Some municipalities ask me to produce documentation related to the CMS system used. Do you have any advice ?
I looked at the Contao site ... but I did not find anything about the security of the CMS

Contao CMS allows to guarantee an adequate level of security because ?? ...

Ciao Elena ;),

- contao 3.5 uses the password_hash function (http://php.net/manual/en/function.password-hash.php) to encrypt both backend and fronted passwords (using the CRYPT_BLOWFISH algorithm)
- despite the fact Contao is on the market since 2006 it has only a bunch of securiy issue https://www.cvedetails.com/vulnerabi...95/Contao.html

for comparison you can take a look at the same statistics for Wordpress https://www.cvedetails.com/product/4...vendor_id=2337

please if you need more informations please specify what do you mean with "adeguate level of security"