Reflected XSS on formaction parameter

Summary

A reflected Cross-Site Scripting (XSS) vulnerability is identified in the formaction parameter of the target application. The vulnerability occurs when user-supplied data is reflected back without proper sanitization, allowing malicious JavaScript code injection. The issue is compounded by potential cache poisoning capabilities, which could enable the payload to persist and affect multiple users accessing the cached content.