# Cross-site request forgery (CSRF).

A signed-in user’s browser made to send requests they didn’t intend. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Horilla attendance approval endpoint is vulnerable to cross-site request forgery](https://agentprime.io/advisories/CVE-2026-86066.md)
  `CVE-2026-86066` · CVE record: horilla horilla-hr · CVSS 5.9 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [Zammad: Stored HTML injection in Knowledge Base video widget enables forced session switching via unescaped iframe attribute](https://agentprime.io/advisories/CVE-2026-84463.md)
  `CVE-2026-84463` · CVE record: zammad zammad · CVSS 6.3 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Cross-site scripting (XSS), Cross-site request forgery (CSRF), CWE-838
- [Zammad: Malicious input in Ticket Body Enables Session Termination](https://agentprime.io/advisories/CVE-2026-56732.md)
  `CVE-2026-56732` · CVE record: zammad zammad · CVSS 5.3 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Cross-site request forgery (CSRF), CWE-20
- [InvoicePlane: Missing CSRF Token Validation on Multiple Delete Endpoints](https://agentprime.io/advisories/CVE-2026-85289.md)
  `CVE-2026-85289` · CVE record: InvoicePlane InvoicePlane · CVSS 6.5 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [InvoicePlane: Recurring Invoice State Change via GET Request Without CSRF Protection](https://agentprime.io/advisories/CVE-2026-85274.md)
  `CVE-2026-85274` · CVE record: InvoicePlane InvoicePlane · CVSS 6.5 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Elementor Website Builder plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-62062.md)
  `CVE-2026-62062` · CVE record: Elementor Elementor Website Builder · CVSS 8.8 High · Not analysed yet · Published 25 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [ningzichun student-management-system cross-site request forgery](https://agentprime.io/advisories/CVE-2026-97648.md)
  `CVE-2026-97648` · CVE record: ningzichun student-management-system · CVSS 5.3 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Cross-site request forgery (CSRF), Broken access control
- [social-auth-core has Login CSRF via Missing State Parameter in LoginRadius Backend](https://agentprime.io/advisories/GHSA-x7qq-23vw-7pfg.md)
  `GHSA-x7qq-23vw-7pfg`, `CVE-2026-57177`, `PYSEC-2026-4169` · PyPI `social-auth-core`: affected `<5.0.0`, fixed in `5.0.0` · CVSS 4.3 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [sfturing hosp_order CommonUserController.java cross-site request forgery](https://agentprime.io/advisories/CVE-2026-96551.md)
  `CVE-2026-96551` · CVE record: sfturing hosp_order · CVSS 5.3 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Cross-site request forgery (CSRF), Broken access control
- [Joomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0](https://agentprime.io/advisories/CVE-2026-90903.md)
  `CVE-2026-90903` · CVE record: joomshaper.com Easy Store extension for Joomla · CVSS 7.2 High · Not analysed yet · Published 23 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [Joomla Extension - joomshaper.com - Missing CSRF and Access Control on Site Configuration Update in Easy Store extension 1.0.0-3.0.0](https://agentprime.io/advisories/CVE-2026-90905.md)
  `CVE-2026-90905` · CVE record: joomshaper.com Easy Store extension for Joomla · CVSS 7.2 High · Not analysed yet · Published 23 Sept 2026 · Tags: Broken access control, Cross-site request forgery (CSRF)
- [Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Storefront Product Review Submission in Easy Store extension 1.0.0-3.0.0](https://agentprime.io/advisories/CVE-2026-90900.md)
  `CVE-2026-90900` · CVE record: joomshaper.com Easy Store extension for Joomla · CVSS 5.3 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress PublishPress Capabilities plugin <= 2.50.1 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-94487.md)
  `CVE-2026-94487` · CVE record: PublishPress PublishPress Capabilities · CVSS 8.1 High · Not analysed yet · Published 23 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [REDAXO: Missing CSRF Protection on Package Update Action Allows Forced Addon Updates](https://agentprime.io/advisories/GHSA-m8r3-22v6-g877.md)
  `GHSA-m8r3-22v6-g877`, `CVE-2026-63000`, `PKSA-759m-q6p6-jn53` · Packagist `redaxo/source`: affected `<5.21.2`, fixed in `5.21.2` · CVSS 6.4 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [Adobe Experience Manager Forms JEE | Cross-Site Request Forgery (CSRF) (CWE-352)](https://agentprime.io/advisories/CVE-2026-75743.md)
  `CVE-2026-75743` · CVE record: Adobe AEM 6.5 Forms JEE and 1 more · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [MISP CSRF vulnerability in workflow moduleStatelessExecution allows cross-site execution of workflow modules](https://agentprime.io/advisories/CVE-2026-95658.md)
  `CVE-2026-95658` · CVE record: MISP MISP · CVSS 6.9 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [CMSimple 5.24 ships with CSRF protection disabled by default, which turns csrfProtection() into a no-op on every state-changing admin request, and it does not send the csrf_token hidden field in admi…](https://agentprime.io/advisories/CVE-2026-88418.md)
  `CVE-2026-88418` · CVE record · CVSS 8.8 High · Not analysed yet · Published 22 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [draw.io: OAuth CSRF via missing state validation on self-hosted deployments allows session token injection](https://agentprime.io/advisories/CVE-2026-63373.md)
  `CVE-2026-63373` · CVE record: jgraph drawio · CVSS 4.2 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState](https://agentprime.io/advisories/GHSA-phg3-3g28-wq9v.md)
  `GHSA-phg3-3g28-wq9v`, `CVE-2026-61687`, `GO-2026-6535` · Go `github.com/hatchet-dev/hatchet`: affected `<0.91.1`, fixed in `0.91.1` · CVSS 7.1 High · Not analysed yet · Published 21 Sept 2026 · Tags: Authentication bypass, Cross-site request forgery (CSRF), CWE-1275
- [MISP CSRF vulnerability allows unauthorized attribute modification](https://agentprime.io/advisories/CVE-2026-94404.md)
  `CVE-2026-94404` · CVE record: MISP MISP · CVSS 7.1 High · Not analysed yet · Published 21 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [Sign-up Sheets < 2.4.0 - Arbitrary Sign-up Deletion via CSRF](https://agentprime.io/advisories/CVE-2026-92410.md)
  `CVE-2026-92410` · CVE record: Unknown Sign-up Sheets · CVSS 4.3 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [Cotonti through 1.0.0 Cross-Site Request Forgery in the Contact Plugin](https://agentprime.io/advisories/CVE-2026-93873.md)
  `CVE-2026-93873` · CVE record: Cotonti Cotonti · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [Cotonti through 1.0.0 Cross-Site Request Forgery in the Ratings Plugin AJAX Handler](https://agentprime.io/advisories/CVE-2026-93870.md)
  `CVE-2026-93870` · CVE record: Cotonti Cotonti · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-84084.md)
  `CVE-2026-84084` · CVE record: IBM Guardium Data Protection · CVSS 8.8 High · Not analysed yet · Published 18 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-84077.md)
  `CVE-2026-84077` · CVE record: IBM Guardium Data Protection · CVSS 8.1 High · Not analysed yet · Published 18 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent](https://agentprime.io/advisories/CVE-2025-15399.md)
  `CVE-2025-15399` · CVE record: IBM Common Licensing · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [gedelumbung HospitalManagement cross-site request forgery](https://agentprime.io/advisories/CVE-2026-93531.md)
  `CVE-2026-93531` · CVE record: gedelumbung HospitalManagement · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Cross-site request forgery (CSRF), Broken access control
- [django-page-cms through 2.0.13 CSRF via admin mutation views](https://agentprime.io/advisories/CVE-2026-93456.md)
  `CVE-2026-93456` · CVE record: batiste django-page-cms · CVSS 8.4 High · Not analysed yet · Published 18 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [CubeCart: CSRF Protection Missing for Download Resets and Card Deletions in orders.index.inc.php](https://agentprime.io/advisories/CVE-2026-54642.md)
  `CVE-2026-54642` · CVE record: cubecart v6 · CVSS 5.3 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [Speakr: CSRF bypass via unauthenticated API token parameter in csrf_exempt_for_api_tokens hook](https://agentprime.io/advisories/CVE-2026-54510.md)
  `CVE-2026-54510` · CVE record: murtaza-nasir speakr · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass, Cross-site request forgery (CSRF)
- [Cross-site request forgery in Dell OpenManage Server Administrator Managed Node (Patch) for Windows and others](https://agentprime.io/advisories/CVE-2026-80355.md)
  `CVE-2026-80355` · CVE record: Dell OpenManage Server Administrator Managed Node (Patch) for Windows and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Xagio SEO plugin <= 7.1.0.43 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-78295.md)
  `CVE-2026-78295` · CVE record: Xagio SEO Xagio SEO · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress PublishPress Series plugin <= 3.1.3 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-74005.md)
  `CVE-2026-74005` · CVE record: PublishPress PublishPress Series · CVSS 5.4 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Asset CleanUp: Page Speed Booster plugin <= 1.4.0.5 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-66571.md)
  `CVE-2026-66571` · CVE record: Gabe Livan Asset CleanUp: Page Speed Booster · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [Active Products Tables for WooCommerce < 2.1.3 - Subscriber+ Arbitrary Post Title Modification via woot_update_attachment](https://agentprime.io/advisories/CVE-2026-91009.md)
  `CVE-2026-91009` · CVE record: Unknown Active Woot Products Tables for WooCommerce. 100% FREE · CVSS 4.3 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Cross-site request forgery (CSRF), Broken access control
- [AVideo through 29.0 Broken Access Control via videoAddNew.json.php CSRF Bypass](https://agentprime.io/advisories/CVE-2026-92582.md)
  `CVE-2026-92582` · CVE record: WWBN AVideo · CVSS 7.1 High · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [phpList before 3.6.17 Cross-Site Request Forgery via massremove.php](https://agentprime.io/advisories/CVE-2026-92806.md)
  `CVE-2026-92806` · CVE record: phpList phpList · CVSS 7.2 High · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [CMAK through 3.0.0.6 Cross-Site Request Forgery via Missing CSRF Filter](https://agentprime.io/advisories/CVE-2026-92751.md)
  `CVE-2026-92751` · CVE record: yahoo CMAK · CVSS 7.2 High · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [djust has Cross-Site Request Forgery on the Server-Sent-Events transport: a cross-origin page can drive a victim-authenticated SSE session](https://agentprime.io/advisories/GHSA-pg97-jvmf-qfvc.md)
  `GHSA-pg97-jvmf-qfvc`, `CVE-2026-61593`, `PYSEC-2026-4044` · PyPI `djust`: affected `<1.0.7`, fixed in `1.0.7` · CVSS 8.1 High · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [PbootCMS User Management UserController.php mod cross-site request forgery](https://agentprime.io/advisories/CVE-2026-92383.md)
  `CVE-2026-92383` · CVE record: PbootCMS · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site request forgery (CSRF), Broken access control
- [Cross-site request forgery in Advantech EKI-1242IEIMS and others](https://agentprime.io/advisories/CVE-2026-19535.md)
  `CVE-2026-19535` · CVE record: Advantech EKI-1242IEIMS and 1 more · CVSS 8.6 High · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [CSRF token bypass in T-Mobile 5G Box IDU routers](https://agentprime.io/advisories/CVE-2026-40857.md)
  `CVE-2026-40857` · CVE record: WNC T-Mobile 5G Box IDU · CVSS 8.4 High · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [WPLP Cookie Consent < 4.4.4 - Arbitrary Post Deletion via CSRF](https://agentprime.io/advisories/CVE-2026-85131.md)
  `CVE-2026-85131` · CVE record: Unknown WPLP Cookie Consent · CVSS 6.5 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [Netcore NR255-V 1.5.130703 Cross-Site Request Forgery in WAN/LAN Configuration Endpoints](https://agentprime.io/advisories/CVE-2026-76856.md)
  `CVE-2026-76856` · CVE record: Netcore NR255-V · CVSS 7.0 High · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [Cross-site request forgery in Oracle Corporation Oracle Hyperion Data Relationship Management](https://agentprime.io/advisories/CVE-2026-87132.md)
  `CVE-2026-87132` · CVE record: Oracle Corporation Oracle Hyperion Data Relationship Management · CVSS 7.6 High · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [Cross-site request forgery in Oracle Corporation Oracle Sales Online](https://agentprime.io/advisories/CVE-2026-83126.md)
  `CVE-2026-83126` · CVE record: Oracle Corporation Oracle Sales Online · CVSS 7.6 High · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [IDOR in Concrete CMS 9.0.0 through 9.5.2 dashboard sitemap reorder (SitemapUpdate::updateDisplayOrder) allows an authenticated sitemap user to reorder arbitrary pages](https://agentprime.io/advisories/CVE-2026-18425.md)
  `CVE-2026-18425` · CVE record: Concrete CMS Concrete CMS · CVSS 2.1 Low · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site request forgery (CSRF), Broken access control
- [Concrete CMS below 9.5.3 is vulnerable to Cross-Site Request Forgery (CSRF) in Theme Page Template Activation](https://agentprime.io/advisories/CVE-2026-81924.md)
  `CVE-2026-81924` · CVE record: Concrete CMS Concrete CMS · CVSS 2.1 Low · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [Joomla Extension - j2commerce.com - Missing CSRF protection on cart, checkout and myprofile controllers in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7](https://agentprime.io/advisories/CVE-2026-78081.md)
  `CVE-2026-78081` · CVE record: j2commerce.com J2Store extension for Joomla · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [Concrete CMS below 9.5.3 is vulnerable to Cross-Site Request Forgery (CSRF) in Dashboard SEO Excluded Words Reset Endpoint](https://agentprime.io/advisories/CVE-2026-81920.md)
  `CVE-2026-81920` · CVE record: Concrete CMS Concrete CMS · CVSS 2.3 Low · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [Concrete CMS 9.0.0 to 9.5.2 is vunerable to CSRF in Concrete CMS Group Type Deletion Dashboard Action](https://agentprime.io/advisories/CVE-2026-68532.md)
  `CVE-2026-68532` · CVE record: Concrete CMS Concrete CMS · CVSS 2.3 Low · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [Concrete CMS below 9.5.3 is vulnerable to Cross-Site Request Forgery (CSRF) in Block Arrangement Endpoint](https://agentprime.io/advisories/CVE-2026-81919.md)
  `CVE-2026-81919` · CVE record: Concrete CMS Concrete CMS · CVSS 2.3 Low · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [Concrete CMS below version 9.5.3 is vulnerable to Stored XSS via Express form Text control save_control](https://agentprime.io/advisories/CVE-2026-81897.md)
  `CVE-2026-81897` · CVE record: Concrete CMS Concrete CMS · CVSS 7.7 High · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site scripting (XSS), Cross-site request forgery (CSRF)
- [MISP: State-changing actions accessible via GET request enabling CSRF](https://agentprime.io/advisories/CVE-2026-91857.md)
  `CVE-2026-91857` · CVE record: MISP MISP · CVSS 5.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [MISP: HTTP Method Override Bypasses CSRF and Form Validation in BetterSecurityComponent](https://agentprime.io/advisories/CVE-2026-91819.md)
  `CVE-2026-91819` · CVE record: MISP MISP · CVSS 6.9 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Cross-site request forgery (CSRF), CWE-20
- [Concrete CMS 9.0.0 to 9.5.2 is vulnerable to CSRF on Orphan Block Cleanup](https://agentprime.io/advisories/CVE-2026-81902.md)
  `CVE-2026-81902` · CVE record: Concrete CMS Concrete CMS · CVSS 7.1 High · Not analysed yet · Published 14 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [IBM Db2 Mirror for i is vulnerable to Cross-Site Request Forgery \[\]](https://agentprime.io/advisories/CVE-2026-17047.md)
  `CVE-2026-17047` · CVE record: IBM Db2 Mirror for i · CVSS 5.4 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [MISP UserSettingsController CSRF Protection Bypass on setTheme, setHomePage, and eventIndexColumnToggle Endpoints](https://agentprime.io/advisories/CVE-2026-90893.md)
  `CVE-2026-90893` · CVE record: MISP MISP · CVSS 5.1 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [Cross-site request forgery in Contec Co., Ltd. FXA5000 and others](https://agentprime.io/advisories/CVE-2026-82764.md)
  `CVE-2026-82764` · CVE record: Contec Co., Ltd. FXA5000 and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [Rizwan17 inventory-management-system process.php cross-site request forgery](https://agentprime.io/advisories/CVE-2026-90599.md)
  `CVE-2026-90599` · CVE record: Rizwan17 inventory-management-system · CVSS 5.3 Medium · Not analysed yet · Published 13 Sept 2026 · Tags: Cross-site request forgery (CSRF), Broken access control

Newest: <https://agentprime.io/advisories/tag/csrf.md>
Older: <https://agentprime.io/advisories/tag/csrf.md?cursor=WyIyMDI2LTA5LTEzVDIyOjAwOjExLjAxMjAwMFoiLCJDVkUtMjAyNi05MDU5OSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=csrf&cursor=WyIyMDI2LTA5LTI2VDAwOjU5OjI0Ljk4NjAwMFoiLCJDVkUtMjAyNi0xMDA1MjQiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/csrf/?cursor=WyIyMDI2LTA5LTI2VDAwOjU5OjI0Ljk4NjAwMFoiLCJDVkUtMjAyNi0xMDA1MjQiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.