Cross site scripting

In CMS Made Simple 2.2.2, there is Reflected XSS via the cntnt01detailtemplate parameter...

CVE-2017-16783

In CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate parameter...