# Cross-site request forgery (CSRF).

A signed-in user’s browser made to send requests they didn’t intend. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Concrete does not validate a CSRF token before processing requests to \`/dashboard/extend/update/do_update/\<pkgHandle>\`](https://agentprime.io/advisories/GHSA-jr5g-qv3g-rxxx.md)
  `GHSA-jr5g-qv3g-rxxx`, `CVE-2026-8417`, `PKSA-8c12-5257-gxrx` · Packagist `concrete5/concrete5`: affected `<9.5.1`, fixed in `9.5.1` · CVSS 7.5 High · Not analysed yet · Published 21 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Concrete CMS does not validate a CSRF token before processing requests to \`/dashboard/extend/update/prepare_remote_upgrade/\<remoteMPID>\`](https://agentprime.io/advisories/GHSA-5rj5-gfmr-hrc3.md)
  `GHSA-5rj5-gfmr-hrc3`, `CVE-2026-8426`, `PKSA-61mc-443r-dbcf` · Packagist `concrete5/concrete5`: affected `<9.5.1`, fixed in `9.5.1` · CVSS 7.5 High · Not analysed yet · Published 21 May 2026 · Tags: Cross-site request forgery (CSRF), CWE-829
- [Concrete CMS contains a CSRF vulnerability](https://agentprime.io/advisories/GHSA-4c8m-6fwx-m7xq.md)
  `GHSA-4c8m-6fwx-m7xq`, `CVE-2026-8421`, `PKSA-ftn7-4ynj-kvdm` · Packagist `concrete5/concrete5`: affected `<9.5.1`, fixed in `9.5.1` · CVSS 7.5 High · Not analysed yet · Published 21 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Concrete CMS is Vulnerable to Cross-Site Request Forgery](https://agentprime.io/advisories/GHSA-r42c-3rr2-jrfp.md)
  `GHSA-r42c-3rr2-jrfp`, `CVE-2026-8140`, `PKSA-krdd-qg62-29s4` · Packagist `concrete5/concrete5`: affected `<9.5.1`, fixed in `9.5.1` · CVSS 7.5 High · Not analysed yet · Published 21 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Mobile SSO authentication flow allows credential theft via malicious server](https://agentprime.io/advisories/CVE-2026-22880.md)
  `CVE-2026-22880` · CVE record: Mattermost Mattermost · CVSS 6.1 Medium · Not analysed yet · Published 21 May 2026 · Tags: Cross-site request forgery (CSRF)
- [CSRF in Sitemio's WISECP](https://agentprime.io/advisories/CVE-2025-11954.md)
  `CVE-2025-11954` · CVE record: Sitemio Information Technologies Trade Ltd. Co. WISECP · CVSS 8.0 High · Not analysed yet · Published 20 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Anomify AI <= 0.3.6 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2026-6405.md)
  `CVE-2026-6405` · CVE record: simonholliday Anomify AI – Anomaly Detection and Alerting · CVSS 4.3 Medium · Not analysed yet · Published 20 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Word 2 Cash <= 0.9.2 - Cross-Site Request Forgeryto Stored Cross-Site Scripting via Settings Page](https://agentprime.io/advisories/CVE-2026-6395.md)
  `CVE-2026-6395` · CVE record: winking Word 2 Cash · CVSS 6.1 Medium · Not analysed yet · Published 20 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Child Height Predictor by Ostheimer <= 1.3 - Cross-Site Request Forgery to Settings Update via Plugin Settings Form](https://agentprime.io/advisories/CVE-2026-6400.md)
  `CVE-2026-6400` · CVE record: helpstring Child Height Predictor by Ostheimer · CVSS 4.3 Medium · Not analysed yet · Published 20 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Bottom Bar <= 0.1.7 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2026-6401.md)
  `CVE-2026-6401` · CVE record: svil4ok Bottom Bar · CVSS 4.3 Medium · Not analysed yet · Published 20 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Amazon Scraper <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Update](https://agentprime.io/advisories/CVE-2026-8419.md)
  `CVE-2026-8419` · CVE record: submone Amazon Scraper · CVSS 4.3 Medium · Not analysed yet · Published 20 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Remove Yellow BGBOX <= 1.0 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2026-8424.md)
  `CVE-2026-8424` · CVE record: jay_patel Remove Yellow BGBOX · CVSS 4.3 Medium · Not analysed yet · Published 20 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Sentence To SEO (keywords, description and tags) <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Page Parameters](https://agentprime.io/advisories/CVE-2026-6391.md)
  `CVE-2026-6391` · CVE record: eazyserver Sentence To SEO (keywords, description and tags) · CVSS 6.1 Medium · Not analysed yet · Published 20 May 2026 · Tags: Cross-site request forgery (CSRF)
- [BLOGCHAT Chat System <= 1.3.6.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Update](https://agentprime.io/advisories/CVE-2026-8420.md)
  `CVE-2026-8420` · CVE record: rdbeach BLOGCHAT Chat System · CVSS 6.1 Medium · Not analysed yet · Published 20 May 2026 · Tags: Cross-site request forgery (CSRF)
- [JaviBola Custom Theme Test <= 2.0.5 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2026-8423.md)
  `CVE-2026-8423` · CVE record: javibola JaviBola Custom Theme Test · CVSS 4.3 Medium · Not analysed yet · Published 20 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Bigfishgames Syndicate <= 1.2 - Cross-Site Request Forgery to Settings Reset and Update](https://agentprime.io/advisories/CVE-2026-6452.md)
  `CVE-2026-6452` · CVE record: ktulhu Bigfishgames Syndicate · CVSS 4.3 Medium · Not analysed yet · Published 20 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Games Catalog <= 1.2.0 - Cross-Site Request Forgery to Arbitrary Game/Post Deletion](https://agentprime.io/advisories/CVE-2026-8418.md)
  `CVE-2026-8418` · CVE record: askywhale Games Catalog · CVSS 4.3 Medium · Not analysed yet · Published 20 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to force the user with an active session into clicking a malicious HTML link, which t…](https://agentprime.io/advisories/CVE-2026-44925.md)
  `CVE-2026-44925` · CVE record · CVSS 8.8 High · Not analysed yet · Published 20 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Turbo: Login callback CSRF/session fixation](https://agentprime.io/advisories/GHSA-hcf7-66rw-9f5r.md)
  `GHSA-hcf7-66rw-9f5r`, `CVE-2026-45773` · npm `turbo`: affected `<2.9.14`, fixed in `2.9.14` · CVSS 5.1 Medium · Not analysed yet · Published 19 May 2026 · Tags: Cross-site request forgery (CSRF), Authentication bypass
- [Cross-Site request forgery (CSRF) in ScadaBR](https://agentprime.io/advisories/CVE-2026-8604.md)
  `CVE-2026-8604` · CVE record: ScadaBR ScadaBR · CVSS 8.6 High · Not analysed yet · Published 19 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Zechat 1.5 Cross-Site Request Forgery (CSRF) via hashtag parameter](https://agentprime.io/advisories/CVE-2018-25334.md)
  `CVE-2018-25334` · CVE record: Bylancer Zechat · CVSS 5.3 Medium · Not analysed yet · Published 17 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Joomla JoomOCShop 1.0 Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2018-25337.md)
  `CVE-2018-25337` · CVE record: Joomlaextensions Joomla! extension JoomOCShop · CVSS 5.3 Medium · Not analysed yet · Published 17 May 2026 · Tags: Cross-site request forgery (CSRF)
- [jCart for OpenCart 2.3.0.2 Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2018-25336.md)
  `CVE-2018-25336` · CVE record: jCart jCart for OpenCart · CVSS 6.9 Medium · Not analysed yet · Published 17 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Joomla! Component Js Jobs 1.2.0 Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2018-25327.md)
  `CVE-2018-25327` · CVE record: Joomsky JS Jobs · CVSS 6.9 Medium · Not analysed yet · Published 17 May 2026 · Tags: Cross-site request forgery (CSRF)
- [TP-Link TL-WR720N CSRF via Administrative Interfaces (firmware V1_130719)](https://agentprime.io/advisories/CVE-2018-25321.md)
  `CVE-2018-25321` · CVE record: Tp-link TL-WR720NMbps Wireless N Router · CVSS 5.3 Medium · Not analysed yet · Published 17 May 2026 · Tags: Cross-site request forgery (CSRF)
- [bloofoxCMS 0.5.2.1 Cross-Site Request Forgery via user add](https://agentprime.io/advisories/CVE-2020-37241.md)
  `CVE-2020-37241` · CVE record: Bloofox bloofoxCMS · CVSS 6.9 Medium · Not analysed yet · Published 16 May 2026 · Tags: Cross-site request forgery (CSRF)
- [TextPattern CMS 4.9.0-dev Authenticated Remote Code Execution via Plugin Upload](https://agentprime.io/advisories/CVE-2021-47976.md)
  `CVE-2021-47976` · CVE record: Textpattern TextPattern CMS · CVSS 8.7 High · Not analysed yet · Published 16 May 2026 · Tags: Cross-site request forgery (CSRF)
- [AVideo: 2FA toggle endpoint has no CSRF protection, letting an attacker page silently disable a logged-in victim's 2FA](https://agentprime.io/advisories/GHSA-3mv2-vmwh-rwfx.md)
  `GHSA-3mv2-vmwh-rwfx`, `CVE-2026-45610`, `PKSA-p6p4-r212-wdgb` · Packagist `WWBN/AVideo`: affected `<=29.0`, no fixed version yet · CVSS 5.7 Medium · Not analysed yet · Published 15 May 2026 · Tags: Authentication bypass, Cross-site request forgery (CSRF)
- [Better Auth: OAuth callback accepts mismatched \`state\` when cookie-backed state storage is used without PKCE](https://agentprime.io/advisories/GHSA-wxw3-q3m9-c3jr.md)
  `GHSA-wxw3-q3m9-c3jr`, `CVE-2026-67335` · npm `better-auth`: affected `<1.6.2`, fixed in `1.6.2` · CVSS 6.0 Medium · Not analysed yet · Published 15 May 2026 · Tags: Authentication bypass, Cross-site request forgery (CSRF), CWE-345
- [Notify Odoo <= 1.0.1 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2026-8425.md)
  `CVE-2026-8425` · CVE record: pektsekye Notify Odoo · CVSS 4.3 Medium · Not analysed yet · Published 15 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Cross-site request forgery in Fujitsu Japan Limited Musetheque V4 Information Disclosure for IPKNOWLEDGE](https://agentprime.io/advisories/CVE-2026-28761.md)
  `CVE-2026-28761` · CVE record: Fujitsu Japan Limited Musetheque V4 Information Disclosure for IPKNOWLEDGE · CVSS 8.5 High · Not analysed yet · Published 15 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF) via Image URL Manipulation](https://agentprime.io/advisories/GHSA-j6w6-986j-2m2m.md)
  `GHSA-j6w6-986j-2m2m`, `CVE-2026-45317`, `PYSEC-2026-2738` · PyPI `open-webui`: affected `<0.9.3`, fixed in `0.9.3` · CVSS 4.6 Medium · Not analysed yet · Published 14 May 2026 · Tags: Cross-site request forgery (CSRF), CWE-20
- [LatePoint <= 5.3.2 - Cross-Site Request Forgery via 'customer_cabinet\_\_request_cancellation' AJAX Route](https://agentprime.io/advisories/CVE-2026-5365.md)
  `CVE-2026-5365` · CVE record: latepoint LatePoint – Calendar Booking Plugin for Appointments and Events · CVSS 4.3 Medium · Not analysed yet · Published 14 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Cross-Site Request Forgery (CSRF) in GitLab](https://agentprime.io/advisories/CVE-2026-4527.md)
  `CVE-2026-4527` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 14 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Easy2Pilot 7 Cross-Site Request Forgery via admin.php](https://agentprime.io/advisories/CVE-2020-37217.md)
  `CVE-2020-37217` · CVE record: Easy2Pilot Easy2Pilot · CVSS 5.1 Medium · Not analysed yet · Published 13 May 2026 · Tags: Cross-site request forgery (CSRF)
- [BIG-IP Configuration utility CSRF vulnerability](https://agentprime.io/advisories/CVE-2026-40703.md)
  `CVE-2026-40703` · CVE record: F5 BIG-IP · CVSS 5.3 Medium · Not analysed yet · Published 13 May 2026 · Tags: Cross-site request forgery (CSRF)
- [The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a cross-site origin WebSocket hijacking attack.](https://agentprime.io/advisories/CVE-2025-27851.md)
  `CVE-2025-27851` · CVE record · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Warpgate: SSO CSRF -- State Token Not Validated on Return](https://agentprime.io/advisories/CVE-2026-44347.md)
  `CVE-2026-44347` · CVE record: warp-tech warpgate · CVSS 5.8 Medium · Not analysed yet · Published 12 May 2026 · Tags: Cross-site request forgery (CSRF)
- [ChurchCRM: CSRF via legacy GET-delete pages (FundRaiserDelete.php, PropertyTypeDelete.php, NoteDelete.php)](https://agentprime.io/advisories/CVE-2026-44548.md)
  `CVE-2026-44548` · CVE record: ChurchCRM CRM · CVSS 8.1 High · Not analysed yet · Published 12 May 2026 · Tags: Cross-site request forgery (CSRF), CWE-650
- [ChurchCRM: Cross-Site Request Forgery (CSRF) Leading to Admin Privilege Escalation](https://agentprime.io/advisories/CVE-2026-42289.md)
  `CVE-2026-42289` · CVE record: ChurchCRM CRM · CVSS 8.8 High · Not analysed yet · Published 12 May 2026 · Tags: Privilege escalation, Authentication bypass, Cross-site request forgery (CSRF)
- [OpenClaude MCP OAuth Callback: State Check Bypass via error Param Leads to DoS](https://agentprime.io/advisories/GHSA-c73c-x77g-854r.md)
  `GHSA-c73c-x77g-854r`, `CVE-2026-42073` · npm `@gitlawb/openclaude`: affected `<0.5.1`, fixed in `0.5.1` · CVSS 6.5 Medium · Not analysed yet · Published 12 May 2026 · Tags: Cross-site request forgery (CSRF), Denial of service
- [Cross-Site Request Forgery on Extension Pages](https://agentprime.io/advisories/CVE-2026-30807.md)
  `CVE-2026-30807` · CVE record: Pandora FMS Pandora FMS · CVSS 7.1 High · Not analysed yet · Published 12 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Skysa Text Ticker App <= 1.4 - Cross-Site Request Forgery to Settings Modification via 'Save Settings' Form](https://agentprime.io/advisories/CVE-2026-6710.md)
  `CVE-2026-6710` · CVE record: davidskysa Skysa Text Ticker App · CVSS 4.3 Medium · Not analysed yet · Published 12 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Woo Commerce Minimum Weight <= 3.0.1 - Cross-Site Request Forgery via Settings Update Form](https://agentprime.io/advisories/CVE-2026-6932.md)
  `CVE-2026-6932` · CVE record: hemant29 Woo Commerce Minimum Weight · CVSS 4.3 Medium · Not analysed yet · Published 12 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Zawgyi Embed <= 2.1.1 - Cross-Site Request Forgery via 'zawgyi_forceCSS' Parameter](https://agentprime.io/advisories/CVE-2026-7616.md)
  `CVE-2026-7616` · CVE record: saturngod Zawgyi Embed · CVSS 4.3 Medium · Not analysed yet · Published 12 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Tm – WordPress Redirection <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2026-7561.md)
  `CVE-2026-7561` · CVE record: tienrocker Tm – WordPress Redirection · CVSS 6.1 Medium · Not analysed yet · Published 12 May 2026 · Tags: Cross-site request forgery (CSRF)
- [WP-Redirection <= 1.0.3 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2026-7562.md)
  `CVE-2026-7562` · CVE record: phkcorp2005 WP-Redirection · CVSS 4.3 Medium · Not analysed yet · Published 12 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Cross-site request forgery in Backdrop CMS contributed projects backdrop-contrib/salesforce](https://agentprime.io/advisories/CVE-2026-45430.md)
  `CVE-2026-45430` · CVE record: Backdrop CMS contributed projects backdrop-contrib/salesforce · CVSS 7.1 High · Not analysed yet · Published 12 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Cross Site Request Forgery (CSRF) in SAP BusinessObjects Business Intelligence Platform](https://agentprime.io/advisories/CVE-2026-0502.md)
  `CVE-2026-0502` · CVE record: SAP_SE SAP BusinessObjects Business Intelligence Platform · CVSS 5.4 Medium · Not analysed yet · Published 12 May 2026 · Tags: Cross-site request forgery (CSRF)
- [Outline: Slack OAuth state can link a victim Outline account to an attacker Slack identity](https://agentprime.io/advisories/CVE-2026-44695.md)
  `CVE-2026-44695` · CVE record: outline outline · CVSS 5.8 Medium · Not analysed yet · Published 11 May 2026 · Tags: Cross-site request forgery (CSRF)
- [HireFlow v1.2 does not implement CSRF token validation on any state-changing POST endpoint.](https://agentprime.io/advisories/CVE-2026-38566.md)
  `CVE-2026-38566` · CVE record · CVSS 8.1 High · Not analysed yet · Published 11 May 2026 · Tags: Cross-site request forgery (CSRF)
- [OpenCart 3.0.3.7 Cross-Site Request Forgery via account/password](https://agentprime.io/advisories/CVE-2021-47953.md)
  `CVE-2021-47953` · CVE record: Opencart OpenCart · CVSS 5.3 Medium · Not analysed yet · Published 10 May 2026 · Tags: Cross-site request forgery (CSRF)
- [OpenCart 3.0.3.6 Account Takeover via Cross Site Request Forgery](https://agentprime.io/advisories/CVE-2021-47946.md)
  `CVE-2021-47946` · CVE record: Opencart OpenCart · CVSS 6.9 Medium · Not analysed yet · Published 10 May 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Plugin Curtain 1.0.2 Cross-site Request Forgery](https://agentprime.io/advisories/CVE-2022-50955.md)
  `CVE-2022-50955` · CVE record: curtain Curtain · CVSS 5.3 Medium · Not analysed yet · Published 10 May 2026 · Tags: Cross-site request forgery (CSRF)
- [osTicket Dispatcher class.dispatcher.php cross-site request forgery](https://agentprime.io/advisories/CVE-2026-8194.md)
  `CVE-2026-8194` · CVE record: osTicket · CVSS 5.3 Medium · Not analysed yet · Published 9 May 2026 · Tags: Cross-site request forgery (CSRF), Broken access control
- [Emlog: Cross-Site Request Forgery in Admin Functions](https://agentprime.io/advisories/CVE-2026-42286.md)
  `CVE-2026-42286` · CVE record: emlog emlog · CVSS 8.4 High · Not analysed yet · Published 8 May 2026 · Tags: Cross-site request forgery (CSRF)
- [CSRF in DivvyDrive Information Technologies' DivvyDrive](https://agentprime.io/advisories/CVE-2026-5791.md)
  `CVE-2026-5791` · CVE record: DivvyDrive Information Technologies Inc. DivvyDrive · CVSS 6.5 Medium · Not analysed yet · Published 7 May 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress BEAR plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-27415.md)
  `CVE-2026-27415` · CVE record: PluginUs.Net BEAR · CVSS 4.3 Medium · Not analysed yet · Published 7 May 2026 · Tags: Cross-site request forgery (CSRF)
- [SurrealDB Injection on Open Notebook](https://agentprime.io/advisories/CVE-2026-28201.md)
  `CVE-2026-28201` · CVE record: Open Notebook Open Notebook · CVSS 8.7 High · Not analysed yet · Published 7 May 2026 · Tags: Cross-site request forgery (CSRF), Code injection, CWE-20
- [WordPress WPGraphQL plugin <= 2.5.3 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-68604.md)
  `CVE-2025-68604` · CVE record: WPGraphQL WPGraphQL · CVSS 5.4 Medium · Not analysed yet · Published 7 May 2026 · Tags: Cross-site request forgery (CSRF)

Newest: <https://agentprime.io/advisories/tag/csrf.md>
Older: <https://agentprime.io/advisories/tag/csrf.md?cursor=WyIyMDI2LTA1LTA3VDA3OjQwOjI3LjA2NTAwMFoiLCJDVkUtMjAyNS02ODYwNCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=csrf&cursor=WyIyMDI2LTA1LTIxVDIxOjMwOjM4LjAwMDAwMFoiLCJHSFNBLXByeHItdmpnYy0yY3E5Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/csrf/?cursor=WyIyMDI2LTA1LTIxVDIxOjMwOjM4LjAwMDAwMFoiLCJHSFNBLXByeHItdmpnYy0yY3E5Il0>. Everything for agents: <https://agentprime.io/llms.txt>.