Submit an XML contact form. The server parses it and returns the data.
The default payload above tries XXE to read /etc/passwd — submit it and see what happens.