XXE (XML External Entity)

A vulnerability that exploits XML document processing to read local files, make network requests, or cause denial of service. XXE injection occurs when an XML parser accepts external entities without restriction. It is particularly dangerous in SOAP APIs and file import features.