Q. _ is an attack which forces an end user to execute unwanted actions on a web application in which he/she is currently authenticated. (Solved)

1. cross-site scoring scripting

2. cross-site request forgery

3. two-factor authentication