A Cloudflare WAF Bypass for XSS vulnerability has been discovered. The payload used is "><img src=x onerrora=confirm() onerror=confirm(1)>". This bypass allows malicious scripts to be executed on the target website. More details can be found in the tweet by @kingcoolvikas. #bugbounty #bugbountytips
Original tweet: https://twitter.com/RootMoksha/status/1816435729318449562