I'm new to penetration testing and I found a Reflected XSS vulnerability on the website I'm working on.
But the thing is when I submit the form the website automatically redirect me to www.website.com/sendform.php without showing the parameters in the URL.
My question is basically if there is a way to exploit the XSS vulnerability in a way that I can send it through links.
It sounds like you are asking how to tamper with form submissions that are sent in the body via POST, not as part of the URL as with GET.
The way to do this is with a man-in-the-middle proxy such as Burp or ZAP. They will allow you to intercept, read, and modify requests being sent from the browser to the server. As an example, if there are client-side content checks, this allows you to bypass them.
