In this section,
we're going to cover X X E or XML external entity injection according to OaS top 10.
This is the fifth most common security
threat or vulnerability within the tested websites,
with 90% of the tested websites being vulnerable to it.
Now,
this actually moved from number six to number five and more
and more websites are actually being discovered with these vulnerabilities.
That's why chances are as time goes by, this might actually move up the list
and twitter were actually vulnerable to this vulnerability before with
twitter paying $10,000 to the hunter that discovered it.
So as usual, keep your eyes open, stay focused,
practice what I'm going to show you and you'll be
discovering them and cashing out some bounties in no time.