I mean that they used versions of frameworks that were no longer supported, and they did not use best practices which resulted in lots of security concerns (and

I mean that they used versions of frameworks that were no longer supported, and they did not use best practices which resulted in lots of security concerns (and messy code).