Does anyone know a bypass for the `</script>` in the urlencoded request body for cloudflare #waf ? It’s a post based xss, so it should be possible to send the crafted request from another server.
#bugbounty