CVE-2022-30983: XSS

Q: What input is vulnerable?

The vulnerable input is the Support chatbot's Enter email parameter. An attacker can use that parameter to inject arbitrary HTML or web script.

Q: Does exploitation require authentication or local access?

The vulnerability is described as exploitable by remote attackers. The provided information does not identify any authentication or local-access requirement.

Published Aug 24, 2026

Updated

A cross-site scripting (XSS) vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows remote attackers to inject arbitrary web script or HTML via the Enter email parameter.

Affected Software

1 affected component

Nopaperforms Niaa-Chatbot (Support chatbot)<2022-05-17

Event History

Aug 24, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·09:16 PM

Description

Frequently Asked Questions

What input is vulnerable?

The vulnerable input is the Support chatbot's Enter email parameter. An attacker can use that parameter to inject arbitrary HTML or web script.

Does exploitation require authentication or local access?

The vulnerability is described as exploitable by remote attackers. The provided information does not identify any authentication or local-access requirement.

CVE-2022-30983: XSS

Affected Software

Event History

Frequently Asked Questions

What input is vulnerable?

Does exploitation require authentication or local access?

Company

Resources

Contact

Frequently Asked Questions

What input is vulnerable?

Does exploitation require authentication or local access?