The core is hopefully audited and so far except some XSS problems no remote exploits are know for the last few years? However having an usable remote exploit g

The core is hopefully audited and so far except some XSS problems no remote exploits are know for the last few years? However having an usable remote exploit gives you a shell on more than 20% of the websites.