📰 The File That Answered Back — XXE Hidden in Cell A2

Most people know XXE. Few think to look for it inside a spreadsheet upload. But beneath every .xlsx is really a ZIP archive full of XML, and the parser reading it doesn’t always know where to stop. This is the writeup of finding one that didn’t, and what it quietly handed back.The WallThe first thing I discovered wasn’t a vulnerability. It was...