My web-app takes some configs from the user and saves into an XML file (it was not done to stop XSS). The input is XML encoded so that the ",& ... and such characters don't break the XML ...
I read the announcement today related to security issues with OOXML. These issues are fixed as part of 3.10.1 version (issue : CVE-2014-3574 and CVE-2014-3529). However it does not list which all ...