An issue was discovered in VERMEG AgileReporter 21.3. XXE can occur via an XML document to the Analysis component.