In CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate parameter.
cmsmadesimple cms made simple 2.1.6