XMLReader.php in PHPOffice Common before 0.2.9 allows XXE.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-611,
Products Affected