Password reset link should not be able to reset again after clicking on the link

The password reset link can be used multiple times. Although the webpage doesn't state the account it resets for, the link is probably too short to brute force resetting everyone's account.

Most implementations for password resetting is to give user to input new password after clicking on the reset link, then the link will go ineffective after resetting.