Critical bug in Parallels Plesk SSO (XXE Injection)
makthepla.net