Security misconfiguration is a blanket term used to describe configuration at all levels in the web application stack from the OS but including databases, firewalls, frameworks and the web server. There is lots to get right but there are tools and guides to most of it that will need to be understood to do things properly.
