Full Disclosure: XXE in WeChat Pay Sdk ( WeChat leave a backdoor on merchant
websites)