Description Xiuno BBS 4.0 allows XXE via plugin/xn_wechat_public/route/token.php. References https://gitee.com/xiuno/xiunobbs/issues/I177MY