I've used a lot of content management systems in my day (drupal, wordpress, joomla, etc.) and they have all been database driven using MySQL. While the security updates for many CMS offerings out there seem frequent and strong, I still see the occasional site go down, get defaced, etc. (usually from SQL injection attacks).
This has led me to look at Get-Simple CMS, which has the unique difference of housing data in XML files. I realize folks won't be able to speak about specific vulnerabilities related to this CMS, but in general what are the pros and cons with regard to security and an XML driven CMS?