Checkmarx interview question

Questions about application vulnerabilities - SQL Injection, XSS, CSRF