CVE-2022-30983

Received Received - Intake

XSS in Nopaperforms Niaa-Chatbot Support Chatbot

Publication date: 2026-08-24

Last updated on: 2026-08-24

Assigner: MITRE

Description

A cross-site scripting (XSS) vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows remote attackers to inject arbitrary web script or HTML via the Enter email parameter.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-24

Last Modified

2026-08-24

Generated

2026-08-25

AI Q&A

2026-08-25

EPSS Evaluated

N/A

NVD

CVE-2022-30983

EUVD

EUVD-2022-56022

Affected Vendors & Products

Vendor	Product	Version / Range
nopaperforms	niaa-chatbot	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a cross-site scripting (XSS) vulnerability in the Support chatbot component of Nopaperforms Niaa-Chatbot. It allows remote attackers to inject malicious scripts or HTML code through the 'Enter email' parameter. This could enable attackers to execute arbitrary code in the context of a user's browser session.

Impact Analysis

This vulnerability could allow attackers to steal sensitive user data like session cookies, login credentials, or personal information. It may also enable phishing attacks or defacement of the chatbot interface. Users interacting with the vulnerable chatbot could unknowingly execute malicious scripts.

Compliance Impact

This XSS vulnerability could lead to unauthorized access or disclosure of personal data, violating GDPR's data protection principles. For HIPAA, it may compromise protected health information if exposed. Organizations using this software could face compliance violations and potential fines.

Mitigation Strategies

Update the Nopaperforms Niaa-Chatbot to the latest version to address the XSS vulnerability in the Support chatbot. If an update is not available, consider disabling the chatbot feature or implementing input validation to block malicious scripts.

Hi! I’m here to help you understand CVE-2022-30983. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70