Bug bounty write-up: XXE bug leading to LFI
medium.com