Which of the following web vulnerabilities would an attacker be attempting to exploit if they delivered the following input?

XXE exploits occur when a web application processes XML input containing external entity references, allowing the attacker to access files on the server, execute server-side requests, or disclose internal network information by tricking the XML parser into retrieving malicious content. This vulnerability leverages features designed for legitimate XML document processing but misconfigured or inadequately secured.

SQLi (SQL Injection) exploits vulnerabilities in database queries, not XML parsing, by injecting malicious SQL code into input fields.

IDOR (Insecure Direct Object Reference) involves bypassing authorization checks to directly access protected resources, which is unrelated to the type of input delivered in this context.

XSS (Cross-Site Scripting) involves injecting malicious client-side scripts into web pages to be executed in a user's browser, which is a different attack vector than server-side XML processing.