Hi,

There is a fix from Micha, but I could not figure out what to do for getting that fix into my 2.3.7.

You have to edit the themes/default/subtemplates/admin.inc.tpl file. In line ~620, you have to add <input type="hidden" name="csrf_token" value="{$CSRF_TOKEN}" />

/Micha