EPSS
Percentile
78.6%
WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL.
packetstormsecurity.com/files/148390/WeChat-Pay-SDK-XXE-Injection.html