Which is the description of CSRF (Cross-Site Request Forgery)?

CSRF (Cross-Site Request Forgery) is an attack where a malicious website tricks a user into performing unintended actions on another site where the user is authenticated. Option D correctly describes this—a victim unknowingly visits a malicious page that executes requests in their browser against a trusted site. Options A, B, and C describe different attacks: A describes a DDoS-based exploitation, B describes XSS (Cross-Site Scripting), and C describes SQL Injection.

Step-by-step Derivation:
CSRF fundamentals: An attacker tricks an authenticated user into visiting a malicious site. The malicious site contains code that silently makes requests to another website (e.g., a bank) using the victim's credentials/session. The victim's browser automatically includes authentication cookies, so the request succeeds. The victim never intended this action. Option D captures this: 'allows visitors to browse web pages with malicious scripts embedded' (the attack site), which then runs 'unintended operations on other visitors' browsers' (against the target site). Options B and C are XSS and SQL Injection respectively, which are distinct vulnerability classes.