CSS Injection

Functionally the same as XSS, but with CSS.

You can steal CSRF tokens by bruteforcing using this method.

https://www.curesec.com/blog/article/blog/Reading-Data-via-CSS-Injection-180.htmlwww.curesec.com