Which of the following is a malicious exploit of a website, whereby unauthorized commands are transmitted from a user trusted by the website?

Cross-Site Scripting (XSS) involves injecting malicious scripts into web pages viewed by other users, typically to steal cookies or session tokens, rather than forcing a user to send unauthorized commands from their browser.

An Injection flaw occurs when untrusted data is sent to an interpreter as part of a command or query, such as SQL injection, leading to execution of unintended commands on the server-side.

A side-channel attack involves gleaning information from the physical implementation of a system (e.g., timing information, power consumption) rather than directly exploiting a software vulnerability.

Cross-Site Request Forgery (CSRF) is a web security vulnerability that allows an attacker to induce authenticated users to unknowingly submit malicious requests to a web application. The attack exploits the trust a website has in a user's browser, leading to unintended actions performed by the victim.