is an attack which forces an end user to execute unwanted actions on a web application in which he/she is currently authenticated.

• A. two-factor authentication
• B. cross-site request forgery
• C. cross-site scripting
• D. cross-site scoring scripting