Security Misconfiguration
Leaking source code or application logic comes with unhandled exceptions, which is one of the security misconfiguration issues.
Solution
Upload invalid XML on the /Transaction
page.
.
You will find the flag on the developer exception page.