Cross-site request forgery

A web application flaw that lets another site make a signed-in user's browser send a request that the trusting site accepts as intended.

Scheme

Broader terms