cross-site request forgery (CSRF)

Also written: CSRF

Tricking a logged-in user's browser into sending a request the user didn't intend. An example is a hidden form that posts 'change my email' to the shop along with the user's cookie.