Cloudflare WAF XSS bypass exploits revealed

  • The exploit has been publicly known since 2019 but remains unpatched.