Web application penetration test of a content management system (CMS)