New system attack methods are developed each day, often modifying code or replacing programs. Which of these attacks would correctly identify a scenario where an attacker tricks a victim into clicking a link the user would normally not approve which allows the attacker to perform an undesired function on the victim's behalf?

Injection attack

Cross-site request forgery

Escalation of privilege

Cross-site scripting attack

Explanation

A cross-site scripting attack lets an attacker bypass security mechanisms in websites. Escalation of privilege is an attack where an attacker accesses a system in attempt to gain a higher level of privilege. An injection attack is where an attacker inserts computer instructions into a computers input fields. Cross-site request forgery attacks involve tricking a user into authorizing some action (using their stored cookies) on a separate site, which they would normally not do. EDIT: CSRF vs XSS is ambiguous in the context of the question. The first sentence is also hinting towards XSS, which makes me think XSS is the "more right" answer.