CSRF

An attack that tricks a logged‑in user into making a request they didn’t intend.

Analogy: Someone forging your signature while you’re distracted.