Cloudflare Public Bug Bounty · Report #1615743
Basic XSS [WAF Bypasses]
Informativestatus
$50bounty
27upvotes
7 Jul 2023disclosed
Summary
This is a WAF bypass using payloads
Mega7%3EXSS%3CIMG/SRC=https://www.notebookcheck.net/fileadmin/Notebooks/News/_nc3/hacker21.jpg and Mega7>XSS<A/href=https://evil.com
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.