What are common XSS payload techniques used to bypass Cloudflare's WAF?

Common XSS payload techniques used to bypass Cloudflare's WAF often involve obfuscation and encoding. This includes using HTML entities (e.g., `<script>`), URL encoding (`%3cscript%3e`), double encoding, different JavaScript character encodings (`\x3cscript\x3e`), or leveraging less common HTML tags/attributes that can execute JavaScript (e.g., ``, ``). Attackers also look for ways to inject into contexts where the WAF might not apply its full ruleset, such as within JSON responses or specific content types.