Cross-site request forgery requires a secure website or network that needs user authentication while Cross-site scripting is for websites with no user authentication policies.
Explanation:
Cross-site request forgery is a process used by hackers and network administrators to forcefully grant access to users on a secure website or network. If an administration trust a user who has lost his authentication details, he uses cross-site request forgery to give access to the user.
Cross-site scripting is basically javascript program execution from a server. It is not secure and vulnerable to attacks.
This is true because some people may be going through rough times and when they aren't they probably won't feel the same way as they do when they go through tough times.
