Unveiling the Vulnerability: bwapp HTML Injection - Reflected (GET)