An attacker can easily create a document that attempts to stress and break an XML parser that contains 10,000 or 100,000 elements with complex hierarchy of nested elements. 4) Oversized XML documents/payloads XML can wrap up any type of data including multimedia or binary data.