XXE

XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data.

Highly useful (XXE 2 RCE) : https://sirensecurity.io/blog/from-xxe-to-rce/