Cross Site Request Forgery

https://whitton.io/articles/messenger-site-wide-csrf/

https://hethical.io/paypal-bug-bounty-updating-the-paypal-me-profile-picture-without-consent-csrf-attack/

http://yasserali.com/hacking-paypal-accounts-with-one-click/

https://hackerone.com/reports/100820

http://philippeharewood.com/facebookmarketingdevelopers-com-proxies-csrf-quandry-and-api-fun/

https://aadityapurani.com/2016/07/20/how-i-hacked-your-beats-account-apple-bug-bounty/