3 ms·

The scenario you mentioned is one of the things people mean when they talk about cross-site request forgery.