CSRF

Cross-site request forgery: tricking a logged-in user's browser into sending a request they did not intend, riding on their session cookie.