I wouldn't say that XXEs are similar to SQL injections but they can lead to similar outcomes in terms of exploitation. I've actually seen similar attacks in YAML parsers. Might write a post about it in the future!