EIP-2026-119666

This exploit demonstrates an XML External Entity (XXE) injection vulnerability in XML Notepad 2.8.0.4, allowing an attacker to read arbitrary files from the local filesystem by crafting a malicious XML file and hosting a malicious DTD on a local server.