I have always looked at reflected XSS as an attack that would take place through a URL. So, for example, you would have a URL like below:
and the message would be written to the page. In order to execute the attack you would need to trick someone into clicking on that link.
In my first example, a user would need to click a link to execute the attack. How would you execute an attack with the second vulnerability?