A Cloudflare WAF bypass for XSS vulnerability was discovered by @xss0r. The payload used for the bypass is '>alert(154)</script><script/154='. This bypass exploits a vulnerability in the Cloudflare WAF. For more details and technical information, check out the blogpost at [link].