A new XSS bypass technique was found for AWS WAF. The payload <script>alert(1)</script> was used to successfully bypass the WAF. Check out the detailed blogpost by @0xbartita for more technical information.
For more insights, check out the original tweet here: https://twitter.com/GodSpeed000123/status/1830900093966250261