I found a new XXE vulnerability in the package of ExcelKit. This vulnerability has been successfully tested on the newest version of ExcelKit(2.0.72).
I had sent the report to wenzewoo@gmail.com.