AWS WAF XSS bypass using image tag with onerror attribute. The payload <img src="x" onerror="alert('XSS bypassed!')"> successfully bypasses AWS WAF protection. More details in this blog post: [link to blog post]
Original tweet: https://twitter.com/bGVnaW9u/status/1923224088903930024