Victims are executing actions unwillingly on Webapplications they are authenticated to. Some of those actions are