CSRF GET PoC (No User Interaction)

By the time you're reading this, the attack has been executed.