# Cross-site request forgery (CSRF).

A signed-in user’s browser made to send requests they didn’t intend. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [SourceCodester Diary App diary.php cross-site request forgery](https://agentprime.io/advisories/CVE-2026-4968.md)
  `CVE-2026-4968` · CVE record: SourceCodester Diary App · CVSS 5.3 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: Cross-site request forgery (CSRF), Broken access control
- [Botpress - Credential Disclosure via Twilio Webhook Handler](https://agentprime.io/advisories/CVE-2026-4984.md)
  `CVE-2026-4984` · CVE record: botpress botpress · CVSS 8.2 High · Not analysed yet · Published 27 Mar 2026 · Tags: Cross-site request forgery (CSRF), CWE-345
- [Automated Logout - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-030](https://agentprime.io/advisories/CVE-2026-4393.md)
  `CVE-2026-4393` · CVE record: Drupal Automated Logout · CVSS 4.3 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Conditional Menus <= 1.2.6 - Cross-Site Request Forgery to Menu Options Update](https://agentprime.io/advisories/CVE-2026-1032.md)
  `CVE-2026-1032` · CVE record: themifyme Conditional Menus · CVSS 4.3 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [IBM InfoSphere Information Server is vulnerable to cross-site request forgery](https://agentprime.io/advisories/CVE-2025-36422.md)
  `CVE-2025-36422` · CVE record: IBM InfoSphere Information Server · CVSS 4.3 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Mattermost doesn't properly validate CSRF tokens](https://agentprime.io/advisories/GHSA-rmhw-c3xr-m3xx.md)
  `GHSA-rmhw-c3xr-m3xx`, `CVE-2026-27659`, `GO-2026-5629` · Go `github.com/mattermost/mattermost/server/v8`: affected `>=8.0.0-20260105080200-d27a2195068d, <10.11.11 || >=10.11.0-rc1, <10.11.11 || >=11.2.0-rc1, <11.2.3 || >=11.3.0-rc1, <11.3.2 || >=11.4.0-rc1, <11.4.1`, fixed in `10.11.11`, `11.2.3`, `11.3.2`, `11.4.1` · CVSS 4.6 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [AVideo's GET-Based CSRF in setPermission.json.php Enables Privilege Escalation via Arbitrary Permission Modification](https://agentprime.io/advisories/GHSA-g8x9-7mgh-7cvj.md)
  `GHSA-g8x9-7mgh-7cvj`, `CVE-2026-33649`, `PKSA-nfgn-q1hy-xddr` · Packagist `wwbn/avideo`: affected `<=26.0`, no fixed version yet · CVSS 8.1 High · Not analysed yet · Published 25 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Cross-Site Request Forgery (CSRF) in GitLab](https://agentprime.io/advisories/CVE-2026-3857.md)
  `CVE-2026-3857` · CVE record: GitLab GitLab · CVSS 8.1 High · Not analysed yet · Published 25 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Theme Negotiation by Rules - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-012](https://agentprime.io/advisories/CVE-2026-3211.md)
  `CVE-2026-3211` · CVE record: Drupal Theme Negotiation by Rules · CVSS 4.3 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Ericsson Indoor Connect 8855 - Cross-Site Request Forgery Vulnerability](https://agentprime.io/advisories/CVE-2025-40841.md)
  `CVE-2025-40841` · CVE record: Ericsson Indoor Connect 8855 · CVSS 5.1 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [DedeCMS v5.7.118 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability in /sys_task_add.php.](https://agentprime.io/advisories/CVE-2026-29839.md)
  `CVE-2026-29839` · CVE record · CVSS 8.8 High · Not analysed yet · Published 24 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [kalcaddle kodbox loginSubmit API index.class.php cross-site request forgery](https://agentprime.io/advisories/CVE-2026-4590.md)
  `CVE-2026-4590` · CVE record: kalcaddle kodbox · CVSS 2.3 Low · Not analysed yet · Published 23 Mar 2026 · Tags: Cross-site request forgery (CSRF), Broken access control
- [Missing CSRF Protection on Administrative Endpoints in Nexxt Nebula 300+](https://agentprime.io/advisories/CVE-2026-31849.md)
  `CVE-2026-31849` · CVE record: Nexxt Solutions Nebula 300+ · CVSS 7.2 High · Not analysed yet · Published 23 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Post Snippits <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Update](https://agentprime.io/advisories/CVE-2026-2723.md)
  `CVE-2026-2723` · CVE record: phy9pas Post Snippits · CVSS 6.1 Medium · Not analysed yet · Published 21 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Neos Connector for Fakturama <= 0.0.14 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2026-4143.md)
  `CVE-2026-4143` · CVE record: neo2oo5 Neos Connector for Fakturama · CVSS 4.3 Medium · Not analysed yet · Published 21 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Invelity Products Feeds <= 1.2.6 - Cross-Site Request Forgery to Arbitrary File Deletion](https://agentprime.io/advisories/CVE-2025-14037.md)
  `CVE-2025-14037` · CVE record: invelity Invelity Product Feeds · CVSS 8.1 High · Not analysed yet · Published 21 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [login_register <= 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2026-1503.md)
  `CVE-2026-1503` · CVE record: frankkoenen Plugin Name: login_register · CVSS 4.3 Medium · Not analysed yet · Published 21 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Lobot Slider Administrator <= 0.6.0 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2026-3331.md)
  `CVE-2026-3331` · CVE record: chuckmo Lobot Slider Administrator · CVSS 4.3 Medium · Not analysed yet · Published 21 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [SR WP Minify HTML <= 2.1 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2026-1392.md)
  `CVE-2026-1392` · CVE record: superrishi SR WP Minify HTML · CVSS 4.3 Medium · Not analysed yet · Published 21 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Xhanch - My Advanced Settings <= 1.1.2 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2026-3332.md)
  `CVE-2026-3332` · CVE record: xhanch_studio Xhanch – My Advanced Settings · CVSS 4.3 Medium · Not analysed yet · Published 21 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Redirect countdown <= 1.0 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2026-1390.md)
  `CVE-2026-1390` · CVE record: haghs Redirect countdown · CVSS 4.3 Medium · Not analysed yet · Published 21 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [WP Posts Re-order <= 1.0 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2026-1378.md)
  `CVE-2026-1378` · CVE record: suifengtec WP Posts Re-order · CVSS 4.3 Medium · Not analysed yet · Published 21 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Add Google Social Profiles to Knowledge Graph Box <= 1.0 - Cross-Site Request Forgery to Settings Update](https://agentprime.io/advisories/CVE-2026-1393.md)
  `CVE-2026-1393` · CVE record: omarnas Add Google Social Profiles to Knowledge Graph Box · CVSS 4.3 Medium · Not analysed yet · Published 21 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [AVideo Affected by CSRF on Plugin Import Endpoint Enables Unauthenticated Remote Code Execution via Malicious Plugin Upload](https://agentprime.io/advisories/GHSA-hv36-p4w4-6vmj.md)
  `GHSA-hv36-p4w4-6vmj`, `CVE-2026-33507`, `PKSA-9rhr-hzp4-skcj` · Packagist `wwbn/avideo`: affected `<=26.0`, no fixed version yet · CVSS 8.8 High · Not analysed yet · Published 20 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Precurio Intranet Portal 4.4: Cross-Site Request Forgery leading to arbitrary file upload](https://agentprime.io/advisories/CVE-2026-32989.md)
  `CVE-2026-32989` · CVE record: Precurio Precurio Intranet Portal · CVSS 8.6 High · Not analysed yet · Published 20 Mar 2026 · Tags: Cross-site request forgery (CSRF), Unrestricted file upload
- [WordPress Flash Video Player plugin <= 5.0.4 - CSRF to XSS vulnerability](https://agentprime.io/advisories/CVE-2024-32537.md)
  `CVE-2024-32537` · CVE record: joshuae1974 Flash Video Player · CVSS 7.1 High · Not analysed yet · Published 20 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.](https://agentprime.io/advisories/CVE-2026-33372.md)
  `CVE-2026-33372` · CVE record · CVSS 5.4 Medium · Not analysed yet · Published 20 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Cross-Site Tool Execution for HTTP Servers without Authorizatrion in github.com/modelcontextprotocol/go-sdk](https://agentprime.io/advisories/GHSA-89xv-2j6f-qhc8.md)
  `GHSA-89xv-2j6f-qhc8`, `CVE-2026-33252`, `GO-2026-4773` · Go `github.com/modelcontextprotocol/go-sdk`: affected `<1.4.1`, fixed in `1.4.1` · CVSS 7.1 High · Not analysed yet · Published 19 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Add Custom Fields to Media <= 2.0.3 - Cross-Site Request Forgery to Custom Field Deletion via 'delete' Parameter](https://agentprime.io/advisories/CVE-2026-4068.md)
  `CVE-2026-4068` · CVE record: pattihis Add Custom Fields to Media · CVSS 4.3 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Cross‑Site Request Forgery in Link Aggregation Configuration](https://agentprime.io/advisories/CVE-2026-22323.md)
  `CVE-2026-22323` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 7.1 High · Not analysed yet · Published 18 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [MuraCMS through 10.1.10 contains a CSRF vulnerability that allows attackers to permanently destroy all deleted content stored in the trash system through a simple CSRF attack.](https://agentprime.io/advisories/CVE-2025-55046.md)
  `CVE-2025-55046` · CVE record · CVSS 8.1 High · Not analysed yet · Published 18 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [The update address CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to manipulate user address information through CSRF.](https://agentprime.io/advisories/CVE-2025-55045.md)
  `CVE-2025-55045` · CVE record · CVSS 7.1 High · Not analysed yet · Published 18 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [The Trash Restore CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to restore deleted content from the trash to unauthorized locations through CSRF.](https://agentprime.io/advisories/CVE-2025-55044.md)
  `CVE-2025-55044` · CVE record · CVSS 8.8 High · Not analysed yet · Published 18 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [MuraCMS through 10.1.10 contains a CSRF vulnerability in the bundle creation functionality (csettings.cfc createBundle method) that allows unauthenticated attackers to force administrators to create…](https://agentprime.io/advisories/CVE-2025-55043.md)
  `CVE-2025-55043` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 18 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [MuraCMS through 10.1.10 contains a CSRF vulnerability in the Add To Group functionality for user management (cUsers.cfc addToGroup method) that allows attackers to escalate privileges by adding any u…](https://agentprime.io/advisories/CVE-2025-55041.md)
  `CVE-2025-55041` · CVE record · CVSS 8.0 High · Not analysed yet · Published 18 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [The import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload and install malicious form definitions through a CSRF attack.](https://agentprime.io/advisories/CVE-2025-55040.md)
  `CVE-2025-55040` · CVE record · CVSS 8.8 High · Not analysed yet · Published 18 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Edimax GS-5008PL <= 1.00.54 CSRF via Management CGI Endpoints](https://agentprime.io/advisories/CVE-2026-32839.md)
  `CVE-2026-32839` · CVE record: EDIMAX Technology Co., Ltd. Edimax GS-5008PL · CVSS 5.1 Medium · Not analysed yet · Published 17 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Next.js: null origin can bypass Server Actions CSRF checks](https://agentprime.io/advisories/GHSA-mq59-m269-xvcx.md)
  `GHSA-mq59-m269-xvcx`, `CVE-2026-27978` · npm `next`: affected `>=16.0.1, <16.1.7`, fixed in `16.1.7` · CVSS 5.3 Medium · Not analysed yet · Published 17 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Admidio is Missing CSRF Protection on Role Membership Date Changes](https://agentprime.io/advisories/GHSA-h8gr-qwr6-m9gx.md)
  `GHSA-h8gr-qwr6-m9gx`, `CVE-2026-32755`, `PKSA-ym3s-c4g7-mjjc` · Packagist `admidio/admidio`: affected `<5.0.7`, fixed in `5.0.7` · CVSS 5.7 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Admidio is Missing CSRF Validation on Role Delete, Activate, and Deactivate Actions](https://agentprime.io/advisories/GHSA-wwg8-6ffr-h4q2.md)
  `GHSA-wwg8-6ffr-h4q2`, `CVE-2026-32816`, `PKSA-1wgg-nst3-ctpz` · Packagist `admidio/admidio`: affected `>=5.0.0, <5.0.7`, fixed in `5.0.7` · CVSS 5.7 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Hereta ETH-IMC408M CSRF via Configuration Setup](https://agentprime.io/advisories/CVE-2026-29521.md)
  `CVE-2026-29521` · CVE record: Shenzhen Hereta Technology Co., Ltd. Hereta ETH-IMC408M · CVSS 5.1 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Cross-Site Request Forgery in Raytha CMS](https://agentprime.io/advisories/CVE-2025-69238.md)
  `CVE-2025-69238` · CVE record: Raytha Raytha · CVSS 6.9 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Telesquare SKT LTE Router SDT-CS3B1 CSRF System Command Execution](https://agentprime.io/advisories/CVE-2017-20221.md)
  `CVE-2017-20221` · CVE record: Telesquare SDT-CS3B1 · CVSS 5.3 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Wowza Streaming Engine 4.5.0 CSRF via user edit endpoint](https://agentprime.io/advisories/CVE-2016-20035.md)
  `CVE-2016-20035` · CVE record: Wowza Media Systems, LLC. Wowza Streaming Engine · CVSS 6.9 Medium · Not analysed yet · Published 15 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Wowza Streaming Engine 4.5.0 Privilege Escalation via user edit](https://agentprime.io/advisories/CVE-2016-20034.md)
  `CVE-2016-20034` · CVE record: Wowza Media Systems, LLC. Wowza Streaming Engine · CVSS 8.7 High · Not analysed yet · Published 15 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [RealtyScript 4.0.2 Cross-Site Request Forgery Unauthorized User Creation](https://agentprime.io/advisories/CVE-2015-20117.md)
  `CVE-2015-20117` · CVE record: Next Click Ventures RealtyScript · CVSS 6.9 Medium · Not analysed yet · Published 15 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [RealtyScript 4.0.2 Multiple Cross-Site Request Forgery and Persistent Cross-Site Scripting Vulnerabilities](https://agentprime.io/advisories/CVE-2015-20113.md)
  `CVE-2015-20113` · CVE record: Next Click Ventuers RealtyScript · CVSS 6.9 Medium · Not analysed yet · Published 15 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [ZKTeco ZKBioSecurity 3.0 Cross-Site Request Forgery Superadmin](https://agentprime.io/advisories/CVE-2016-20028.md)
  `CVE-2016-20028` · CVE record: ZKTeco Inc. ZKTeco ZKBioSecurity · CVSS 5.3 Medium · Not analysed yet · Published 15 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Admin Menu Editor plugin <= 1.14.1 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-32456.md)
  `CVE-2026-32456` · CVE record: Janis Elsts Admin Menu Editor · CVSS 4.3 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Product Feed PRO for WooCommerce plugin <= 13.5.2 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-32443.md)
  `CVE-2026-32443` · CVE record: Josh Kohlbach Product Feed PRO for WooCommerce · CVSS 6.5 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress GamiPress plugin <= 7.6.6 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-32420.md)
  `CVE-2026-32420` · CVE record: Ruben Garcia GamiPress · CVSS 5.4 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Corpiva theme <= 1.0.96 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-32344.md)
  `CVE-2026-32344` · CVE record: desertthemes Corpiva · CVSS 4.3 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Easy Table of Contents plugin <= 2.0.80 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-32343.md)
  `CVE-2026-32343` · CVE record: Magazine3 Easy Table of Contents · CVSS 4.3 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Quiz Maker plugin <= 6.7.1.2 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-32342.md)
  `CVE-2026-32342` · CVE record: Ays Pro Quiz Maker · CVSS 4.3 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Photo Gallery by 10Web plugin <= 1.8.37 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-32330.md)
  `CVE-2026-32330` · CVE record: 10Web Photo Gallery by 10Web · CVSS 4.3 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Lemmony theme < 1.7.1 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-32328.md)
  `CVE-2026-32328` · CVE record: shufflehound Lemmony · CVSS 5.4 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [wpDiscuz before 7.6.47 - Missing CSRF Protection on wpdGetFollowsPage](https://agentprime.io/advisories/CVE-2026-22215.md)
  `CVE-2026-22215` · CVE record: gVectors wpDiscuz · CVSS 5.3 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [wpDiscuz before 7.6.47 - Destructive GET Action Deletes All Comments by Email](https://agentprime.io/advisories/CVE-2026-22202.md)
  `CVE-2026-22202` · CVE record: gVectors wpDiscuz · CVSS 6.1 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Emlog asynchronous media file deletion missing CSRF protection](https://agentprime.io/advisories/CVE-2026-31954.md)
  `CVE-2026-31954` · CVE record: emlog emlog · CVSS 0.0 None · Not analysed yet · Published 11 Mar 2026 · Tags: Cross-site request forgery (CSRF)
- [Cross-Site Request Forgery (CSRF) in opnsense/core](https://agentprime.io/advisories/CVE-2026-30868.md)
  `CVE-2026-30868` · CVE record: opnsense core · CVSS 6.3 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: Cross-site request forgery (CSRF)

Newest: <https://agentprime.io/advisories/tag/csrf.md>
Older: <https://agentprime.io/advisories/tag/csrf.md?cursor=WyIyMDI2LTAzLTExVDE2OjM4OjEyLjg4MzAwMFoiLCJDVkUtMjAyNi0zMDg2OCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=csrf&cursor=WyIyMDI2LTAzLTI3VDE5OjE1OjE5LjcxNTAwMFoiLCJDVkUtMjAyNi00OTcxIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/csrf/?cursor=WyIyMDI2LTAzLTI3VDE5OjE1OjE5LjcxNTAwMFoiLCJDVkUtMjAyNi00OTcxIl0>. Everything for agents: <https://agentprime.io/llms.txt>.