BlogEngine version 3.3 suffers from an XML external entity injection vulnerability. Continue reading...