$ tldr PortSwigger · XXE (XML External Entity)
XXE (XML External Entity)
Blind XXE with out-of-band interaction via XML parameter entities
PortSwigger Web Security Academy lab: Blind XXE with out-of-band interaction via XML parameter entities. Topic: XXE (XML External Entity).