XSS worm on my InfinityFree site?

First of all, as a clarification, I’m not a staff. Cloudflare could be the culprit. I thought that they have already fixed the issue though… Can you please check what happens if you disable Cloudflare temporarily and see if the site works? If it works then it is a conflict and if it doesn’t then it’s something else.