XML External Entities

He opens the URL in his browser. The social media site reaches out to find the XML descriptor.
The hacker executing his attack.
The login page for a social network