A Cross Site Scripting (XSS) bypass for Cloudflare WAF was discovered. The bypass payload used was <script>alert('Bypassed!')</script>. This vulnerability allows attackers to execute malicious scripts on the targeted website despite being protected by Cloudflare WAF. For more technical details, visit the tweet link.
Cross Site Scripting Bypass Cloudflare Waf pic.twitter.com/OzkizMpKRP
— unixtz (@iamunixtz) May 16, 2024