Reflected XSS

Mal sends Vic an email with a very tempting link, pointing at the crafted URL.

email.com
Subject:
Free Tacos, every Tuesday
To:
Vic
A taco
LIMITED TIME OFFER - CLICK HERE
The victim