BlogEngine.NET 3.3.7 and earlier allows XXE via an apml file to syndication.axd.

Published Jun 21, 2019 · Updated Aug 4, 2024 · Assigned by mitre