Cross-Site Request Forgery (CSRF)

Question 1

What is Cross-Site Request Forgery (CSRF)?

Answer 1

Cross-Site Request Forgery (CSRF) is a web security vulnerability that tricks a user into performing unintended actions on a web application where they are authenticated.

Question 2

What is the difference between

Answer 2

CSRF: exploits trust that a website has in the user’s browser, XXS: exploits trust that a user has in a website.