Hi!
A potential information leakage in the newsbox() function has been found, and already fixed in CMSimple_XH 1.7.1. Although CMSimple_XH 1.6 had it's end of life, and it not recommended to run this version anymore, if you can't yet update to 1.7.1 for whatever reason, it is recommended to fix the bug yourself. The fix is identical to the one for CMSimple_XH 1.7.0.
Potential information leakage in newsbox() function
Potential information leakage in newsbox() function
Christoph M. Becker – Plugins for CMSimple_XH