CMSimple versions 2.4 and below are susceptible to cross site scripting attacks. Exploitation details provided.