2022 First bug XSS with WAF bypass (using common tricks) https://t.co/Fknn79Shpq