Http request with minimal parameters:
<script>
fetch('http://dvwa.local/vulnerabilities/xss_r/?name=XSS',{method:'GET',credentials:'include'});
</script>

Http request with header fields:
<script>
fetch('http://dvwa.local/vulnerabilities/xss_r/?name=XSS',{method:'GET',credentials:'include',headers:{'Accept':'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8','Sec-GPC':'1','Accept-Language':'en-US,en;q=0.5'}});
</script>