Hello, lets say i have fake form. When i subbmit this form with click on submit button i can preform sucesfull XSS attack. But when i submit this form with javascript document.forms["formName"].submit() it will just redirect to target site. What am I missing?

 btw my target site does not have any token validation, just https encryption.

Thanks