This module is currently limited to XXE vulnerabilities which can be exploited using a single request/response (for example, Apache Solr CVE-2014-6407).