# Cross-site request forgery (CSRF).

A signed-in user’s browser made to send requests they didn’t intend. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [OpenClaw Chutes manual OAuth state validation bypass can cause credential substitution](https://agentprime.io/advisories/GHSA-7rcp-mxpq-72pj.md)
  `GHSA-7rcp-mxpq-72pj`, `CVE-2026-28477` · npm `openclaw`: affected `<2026.2.14`, fixed in `2026.2.14` · CVSS 5.9 Medium · Not analysed yet · Published 18 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [newbee-ltd newbee-mall Multiple Endpoints cross-site request forgery](https://agentprime.io/advisories/CVE-2026-2658.md)
  `CVE-2026-2658` · CVE record: newbee-ltd newbee-mall · CVSS 5.3 Medium · Not analysed yet · Published 18 Feb 2026 · Tags: Cross-site request forgery (CSRF), Broken access control
- [Dam Spam <= 1.0.8 - Cross-Site Request Forgery to Arbitrary Pending Comment Deletion](https://agentprime.io/advisories/CVE-2026-2112.md)
  `CVE-2026-2112` · CVE record: webguyio Dam Spam · CVSS 4.3 Medium · Not analysed yet · Published 18 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Keybase.io Verification <= 1.4.5 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2026-1072.md)
  `CVE-2026-1072` · CVE record: jamesits Keybase.io Verification · CVSS 4.3 Medium · Not analysed yet · Published 18 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [WP Plugin Info Card <= 6.2.0 - Cross-Site Request Forgery to Arbitrary Custom Plugin Entry Creation](https://agentprime.io/advisories/CVE-2026-2023.md)
  `CVE-2026-2023` · CVE record: brikou WP Plugin Info Card · CVSS 4.3 Medium · Not analysed yet · Published 18 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [OpenClaw affected by cross-site request forgery (CSRF) through loopback browser mutation endpoints](https://agentprime.io/advisories/GHSA-3fqr-4cg8-h96q.md)
  `GHSA-3fqr-4cg8-h96q`, `CVE-2026-26317` · npm `clawdbot` and 1 more: affected `<=2026.1.24-3`, no fixed version yet · CVSS 7.1 High · Not analysed yet · Published 18 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the 'Add Doctor' module.](https://agentprime.io/advisories/CVE-2025-70062.md)
  `CVE-2025-70062` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 18 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows](https://agentprime.io/advisories/CVE-2025-27904.md)
  `CVE-2025-27904` · CVE record: IBM DB2 Recovery Expert for LUW · CVSS 6.5 Medium · Not analysed yet · Published 17 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Multiple Vulnerabilities in IBM Concert Software.](https://agentprime.io/advisories/CVE-2025-36018.md)
  `CVE-2025-36018` · CVE record: IBM Concert · CVSS 6.5 Medium · Not analysed yet · Published 17 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [A Cross-Site Request Forgery (CSRF) vulnerability has been identified in phpgurukul Gym Management System 1.0.](https://agentprime.io/advisories/CVE-2024-55271.md)
  `CVE-2024-55271` · CVE record · CVSS 3.5 Low · Not analysed yet · Published 17 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [WP Quick Contact Us <= 1.0 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2026-1394.md)
  `CVE-2026-1394` · CVE record: dmitritechs WP Quick Contact Us · CVSS 4.3 Medium · Not analysed yet · Published 14 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [MDirector Newsletter <= 4.5.8 - Cross-Site Request Forgery to Plugin Settings Update](https://agentprime.io/advisories/CVE-2025-14852.md)
  `CVE-2025-14852` · CVE record: antevenio MDirector Newsletter WordPress Plugin · CVSS 4.3 Medium · Not analysed yet · Published 14 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [LatePoint – Calendar Booking Plugin for Appointments and Events <= 5.2.5 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2025-14873.md)
  `CVE-2025-14873` · CVE record: latepoint LatePoint – Calendar Booking Plugin for Appointments and Events · CVSS 4.3 Medium · Not analysed yet · Published 14 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [SEATT: Simple Event Attendance <= 1.5.0 - Cross-Site Request Forgery to Arbitrary Event Deletion](https://agentprime.io/advisories/CVE-2026-1983.md)
  `CVE-2026-1983` · CVE record: sourcez SEATT: Simple Event Attendance · CVSS 4.3 Medium · Not analysed yet · Published 14 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Cross-Site Request Forgery (CSRF) in FastGPT](https://agentprime.io/advisories/CVE-2026-26075.md)
  `CVE-2026-26075` · CVE record: labring FastGPT · CVSS 6.9 Medium · Not analysed yet · Published 12 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Cross Site Request Forgery vulnerability in Dolibarr ERP & CRM v.22.0.9 allows a remote attacker to escalate privileges via the notes field in perms.php NOTE: this is disputed by a third party who in…](https://agentprime.io/advisories/CVE-2025-69634.md)
  `CVE-2025-69634` · CVE record · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Feb 2026 · Tags: Broken access control, Cross-site request forgery (CSRF), CWE-598
- [AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)](https://agentprime.io/advisories/CVE-2020-37158.md)
  `CVE-2020-37158` · CVE record: AVideo AVideo Platform · CVSS 8.5 High · Not analysed yet · Published 11 Feb 2026 · Tags: Cross-site request forgery (CSRF), CWE-640
- [FlexNet Publisher 11.12.1 - Cross-Site Request Forgery (Add Local Admin)](https://agentprime.io/advisories/CVE-2019-25313.md)
  `CVE-2019-25313` · CVE record: Flexera Software FlexNet Publisher · CVSS 5.1 Medium · Not analysed yet · Published 11 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Cross-site request forgery in Google Chrome](https://agentprime.io/advisories/CVE-2026-2317.md)
  `CVE-2026-2317` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 11 Feb 2026 · Tags: Information disclosure, Cross-site request forgery (CSRF)
- [MMA Call Tracking <= 2.3.15 - Cross-Site Request Forgery to Plugin Settings Update](https://agentprime.io/advisories/CVE-2026-1215.md)
  `CVE-2026-1215` · CVE record: messagemetric MMA Call Tracking · CVSS 4.3 Medium · Not analysed yet · Published 11 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Kanboard Affected by Cross-Site Request Forgery (CSRF) via Content-Type Misconfiguration in Project Role Assignment](https://agentprime.io/advisories/CVE-2026-24885.md)
  `CVE-2026-24885` · CVE record: kanboard kanboard · CVSS 5.7 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [unity-cli Exposes Plaintext Credentials in Debug Logs (sign-package command)](https://agentprime.io/advisories/GHSA-4255-c27h-62m5.md)
  `GHSA-4255-c27h-62m5`, `CVE-2026-25918` · npm `@rage-against-the-pixel/unity-cli`: affected `<1.8.2`, fixed in `1.8.2` · CVSS 5.9 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: Cross-site request forgery (CSRF), Information disclosure
- [PlaciPy is Missing CSRF Protection on State-Changing Endpoints](https://agentprime.io/advisories/CVE-2026-25812.md)
  `CVE-2026-25812` · CVE record: Praskla-Technology assessment-placipy · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Cross-site request forgery in Yokogawa Electric Corporation FAST/TOOLS](https://agentprime.io/advisories/CVE-2025-66595.md)
  `CVE-2025-66595` · CVE record: Yokogawa Electric Corporation FAST/TOOLS · CVSS 6.3 Medium · Not analysed yet · Published 9 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [TITLE ANIMATOR <= 1.0 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2026-1082.md)
  `CVE-2026-1082` · CVE record: arkapravamajumder TITLE ANIMATOR · CVSS 4.3 Medium · Not analysed yet · Published 7 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Wing FTP Server < 6.2.7 - Cross-site Request Forgery](https://agentprime.io/advisories/CVE-2020-37079.md)
  `CVE-2020-37079` · CVE record: Wing FTP Server Wing FTP Server · CVSS 5.1 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Business Live Chat Software 1.0 - Cross-Site Request Forgery (Add Admin)](https://agentprime.io/advisories/CVE-2020-37106.md)
  `CVE-2020-37106` · CVE record: Bdtask Business Live Chat Software · CVSS 5.1 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Code Snippets <= 3.9.4 - Cross-Site Request Forgery to Cloud Snippet Download/Update Actions](https://agentprime.io/advisories/CVE-2026-1785.md)
  `CVE-2026-1785` · CVE record: codesnippetspro Code Snippets · CVSS 4.3 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Edimax Technology EW-7438RPn-v3 Mini 1.27 - Cross-Site Request Forgery (CSRF) to Command Execution](https://agentprime.io/advisories/CVE-2020-37149.md)
  `CVE-2020-37149` · CVE record: EDIMAX Technology EW-7438RPn Mini · CVSS 5.1 Medium · Not analysed yet · Published 5 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [HRSALE 1.1.8 - Cross-Site Request Forgery (Add Admin)](https://agentprime.io/advisories/CVE-2020-37145.md)
  `CVE-2020-37145` · CVE record: HRSALE HRSALE · CVSS 5.1 Medium · Not analysed yet · Published 5 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Exagate Sysguard 6001 - Cross-Site Request Forgery (Add Admin)](https://agentprime.io/advisories/CVE-2020-37144.md)
  `CVE-2020-37144` · CVE record: Exagate Sysguard 6001 · CVSS 5.1 Medium · Not analysed yet · Published 5 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [P5 FNIP-8x16A FNIP-4xSH 1.0.20 - Cross-Site Request Forgery (Add Admin)](https://agentprime.io/advisories/CVE-2020-37118.md)
  `CVE-2020-37118` · CVE record: P5 FNIP-8x16A · CVSS 5.1 Medium · Not analysed yet · Published 5 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery (CSRF) vulnerability in the WebAdmin interface through improper handling of the \_s (breadcrumb) param…](https://agentprime.io/advisories/CVE-2025-68722.md)
  `CVE-2025-68722` · CVE record · CVSS 8.8 High · Not analysed yet · Published 5 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [IBM Operations Analytics - Log Analysis is affected by CSRF Token Replay Attack](https://agentprime.io/advisories/CVE-2024-40685.md)
  `CVE-2024-40685` · CVE record: IBM Operations Analytics - Log Analysis · CVSS 4.3 Medium · Not analysed yet · Published 4 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [lcg0124 BootDo cross-site request forgery](https://agentprime.io/advisories/CVE-2026-1835.md)
  `CVE-2026-1835` · CVE record: lcg0124 BootDo · CVSS 5.3 Medium · Not analysed yet · Published 4 Feb 2026 · Tags: Cross-site request forgery (CSRF), Broken access control
- [Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering)](https://agentprime.io/advisories/CVE-2020-37096.md)
  `CVE-2020-37096` · CVE record: EDIMAX Technology Co., Ltd. EW-7438RPn Mini · CVSS 5.1 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Maian Support Helpdesk 4.3 - Cross-Site Request Forgery (Add Admin)](https://agentprime.io/advisories/CVE-2020-37091.md)
  `CVE-2020-37091` · CVE record: Maian Media Maian Support Helpdesk · CVSS 5.1 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Qwik City CSRF protection middleware does not work properly for content type header with parameters (eg. multipart/form-data)](https://agentprime.io/advisories/GHSA-vm6g-8r4h-22x8.md)
  `GHSA-vm6g-8r4h-22x8`, `CVE-2026-25155` · npm `@builder.io/qwik-city`: affected `<1.12.0`, fixed in `1.12.0` · CVSS 5.9 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Qwik City has a CSRF Protection Bypass via Content-Type Header Validation](https://agentprime.io/advisories/GHSA-r666-8gjf-4v5f.md)
  `GHSA-r666-8gjf-4v5f`, `CVE-2026-25151` · npm `@builder.io/qwik-city`: affected `<1.19.0`, fixed in `1.19.0` · CVSS 5.9 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Tenda AC7 Web Interface Lacks CSRF Protections for Admin Actions](https://agentprime.io/advisories/CVE-2026-24434.md)
  `CVE-2026-24434` · CVE record: Shenzhen Tenda Technology Co., Ltd. Tenda AC7 · CVSS 5.1 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Open eClass is Vulnerable to CSRF in Teacher-Restricted Endpoints Allows Unauthorized Actions](https://agentprime.io/advisories/CVE-2026-24666.md)
  `CVE-2026-24666` · CVE record: gunet openeclass · CVSS 6.5 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress ThirstyAffiliates plugin <= 3.11.9 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-25024.md)
  `CVE-2026-25024` · CVE record: Blair Williams ThirstyAffiliates · CVSS 5.4 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress UsersWP plugin <= 1.2.53 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-25015.md)
  `CVE-2026-25015` · CVE record: Stiofan UsersWP · CVSS 4.3 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Enter Addons plugin <= 2.3.2 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-25014.md)
  `CVE-2026-25014` · CVE record: themelooks Enter Addons · CVSS 4.3 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Simple Membership WP user Import plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-24986.md)
  `CVE-2026-24986` · CVE record: wp.insider Simple Membership WP user Import · CVSS 5.4 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Copyscape Premium plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-24966.md)
  `CVE-2026-24966` · CVE record: Copyscape Copyscape Premium · CVSS 4.3 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Sigmize plugin <= 0.0.9 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-24962.md)
  `CVE-2026-24962` · CVE record: Brainstorm Force Sigmize · CVSS 4.3 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress WpEvently plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-24942.md)
  `CVE-2026-24942` · CVE record: magepeopleteam WpEvently · CVSS 4.3 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Cross-site request forgery in ELECOM CO.,LTD. WRC-X1500GS-B and others](https://agentprime.io/advisories/CVE-2026-20704.md)
  `CVE-2026-20704` · CVE record: ELECOM CO.,LTD. WRC-X1500GS-B and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Mail Mint <= 1.19.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2026-1447.md)
  `CVE-2026-1447` · CVE record: getwpfunnels Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails · CVSS 5.4 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [PolarLearn has Multiple Login CSRFs via Missing OAuth state Parameter (GitHub & Google)](https://agentprime.io/advisories/CVE-2026-25221.md)
  `CVE-2026-25221` · CVE record: polarnl PolarLearn · CVSS 2.3 Low · Not analysed yet · Published 2 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Tuleap is missing CSRF protection in the Overview inconsistent items](https://agentprime.io/advisories/CVE-2026-24007.md)
  `CVE-2026-24007` · CVE record: Enalean tuleap · CVSS 4.6 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [Five Star Restaurant Reservations < 2.7.9 - Arbitrary Bookings Deletion via CSRF](https://agentprime.io/advisories/CVE-2026-0658.md)
  `CVE-2026-0658` · CVE record: Unknown Five Star Restaurant Reservations · CVSS 4.3 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: Cross-site request forgery (CSRF)
- [SourceCodester Medical Certificate Generator App cross-site request forgery](https://agentprime.io/advisories/CVE-2026-1745.md)
  `CVE-2026-1745` · CVE record: SourceCodester Medical Certificate Generator App · CVSS 5.3 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: Cross-site request forgery (CSRF), Broken access control
- [Popup Box <= 6.1.1 - Cross-Site Request Forgery to Popup Status Change](https://agentprime.io/advisories/CVE-2026-1165.md)
  `CVE-2026-1165` · CVE record: ays-pro Popup Box – Create Countdown, Coupon, Video, Contact Form Popups · CVSS 4.3 Medium · Not analysed yet · Published 31 Jan 2026 · Tags: Cross-site request forgery (CSRF)
- [Navigate CMS 2.8.7 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2020-37054.md)
  `CVE-2020-37054` · CVE record: Naviwebs S.C. Navigate CMS · CVSS 5.1 Medium · Not analysed yet · Published 30 Jan 2026 · Tags: Cross-site request forgery (CSRF)
- [Sistem Informasi Pengumuman Kelulusan Online 1.0 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2020-37046.md)
  `CVE-2020-37046` · CVE record: Adikiss Sistem Informasi Pengumuman Kelulusan Online · CVSS 5.1 Medium · Not analysed yet · Published 30 Jan 2026 · Tags: Cross-site request forgery (CSRF)
- [Sickbeard 0.1 - Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2020-37026.md)
  `CVE-2020-37026` · CVE record: midgetspy Sickbeard · CVSS 5.1 Medium · Not analysed yet · Published 30 Jan 2026 · Tags: Cross-site request forgery (CSRF)
- [birkir prime <= 0.4.0.beta.0 - Cross-Site Request Forgery in GraphQL](https://agentprime.io/advisories/CVE-2025-15550.md)
  `CVE-2025-15550` · CVE record: birkir prime · CVSS 5.1 Medium · Not analysed yet · Published 29 Jan 2026 · Tags: Cross-site request forgery (CSRF)
- [Liman 0.7 - Cross-Site Request Forgery (Change Password)](https://agentprime.io/advisories/CVE-2020-37007.md)
  `CVE-2020-37007` · CVE record: salihciftci Liman · CVSS 5.1 Medium · Not analysed yet · Published 29 Jan 2026 · Tags: Cross-site request forgery (CSRF)

Newest: <https://agentprime.io/advisories/tag/csrf.md>
Older: <https://agentprime.io/advisories/tag/csrf.md?cursor=WyIyMDI2LTAxLTI5VDE0OjI4OjI5LjY5NTAwMFoiLCJDVkUtMjAyMC0zNzAwNyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=csrf&cursor=WyIyMDI2LTAyLTE4VDIxOjU1OjA1Ljg1OTAwMFoiLCJDVkUtMjAxOS0yNTM1OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/csrf/?cursor=WyIyMDI2LTAyLTE4VDIxOjU1OjA1Ljg1OTAwMFoiLCJDVkUtMjAxOS0yNTM1OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.