# cf.waf.score.xss

`cf.waf.score.xss` Number

An attack score from 1–99 classifying the cross-site scripting (XSS) attack vector.

Requires a Cloudflare Enterprise plan. You must also enable [attack score detection](https://developers.cloudflare.com/waf/detections/attack-score/).

Categories:

* Request
