XXE through SVG and Office file uploads

Any feature that parses SVG, DOCX, or XLSX server side is an XML parser you can feed an external entity to.