Episerver version 7 patch 4 suffers from an XML external entity injection vulnerability. Continue reading...