CVE-2007-0537: Kde Konqueror

Low severity, CVSS 2.6. EPSS: 1.9% chance of exploitation in the next 30 days.

The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting (XSS) attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to CVE-2007-0478.

Affected products

• Kde Konqueror: version 3.5.5 only

Published 2007-01-29. Last modified 2026-06-16.