90017—XSLT Injection

Injection using XSL transformations may be possible, and may allow an attacker to read system information, read and write files, or execute arbitrary code.

Sanitize and analyze every user input coming from any client-side.