Which is the description of CSRR (Cross-Site Request Forgery)?

CSRF (Cross-Site Request Forgery) exploits the trust a website has in an authenticated user's browser by tricking them into performing unwanted actions without their knowledge. Option A describes XSS (Cross-Site Scripting), Option B describes injection attacks, and Option D describes man-in-the-middle/eavesdropping attacks—all distinct from CSRF.

Step-by-step Derivation:
CSRF works by: (1) User logs into their bank website and remains authenticated. (2) User visits a malicious site in another tab. (3) That malicious site contains code that makes the user's browser send a request to the bank (e.g., transfer money) without the user's knowledge. (4) Since the user is still authenticated, the bank processes the request. The key characteristic is that the attacker forces an authenticated user to perform unwanted actions on a target site—this exactly matches Option C.