Cross-Site Request Forgery (CSRF) is an attack that forces a | Spyder Hackz

Cross-Site Request Forgery (CSRF) is an attack that forces authenticated users to submit a request to a Web application against which they are currently authenticated. CSRF attacks exploit the trust a Web application has in an authenticated user.
(Conversely, cross-site scripting (XSS) attacks exploit the trust a user has in a particular Web application). A CSRF attack exploits a vulnerability in a Web application if it cannot differentiate between a request generated by an individual user and a request generated by a user without their consent.

An attacker’s aim for carrying out a CSRF attack is to force the user to submit a state-changing request.
Examples include:

Submitting or deleting a record.
Submitting a transaction.
Purchasing a product.
Changing a password.
Sending a message.