XML External Entity (XXE)

symphonycms/symphony-2 is vulnerable XML External Entity XXE. The vulnerability exists due to lack of disabling external entity in the function convertFromXMLString of symphony\lib\toolkit\class.xmlelement.php...