diff --git a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-user.tt b/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-user.tt
index a4e76ede71..f521bedf47 100644
--- a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-user.tt
+++ b/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-user.tt
@@ -1390,7 +1390,9 @@
             var ajaxData = {
                 'action': 'issuenote',
                 'issue_id': issue_id,
-                'note': note
+                'note': note,
+                csrf_token: $('meta[name="csrf-token"]').attr('content'),
+                op: 'cud-add_note',
             };
 
             $.ajax({
diff --git a/opac/svc/checkout_notes b/opac/svc/checkout_notes
index c0678db2fc..e8281d90fc 100755
--- a/opac/svc/checkout_notes
+++ b/opac/svc/checkout_notes
@@ -48,10 +48,10 @@ if ( $auth_status ne "ok" ) {
     exit 0;
 }
 if ($is_ajax) {
-    my $action = $query->param('action');
+    my $op = $query->param('op');
 
     # Issue Note
-    if ( $action eq 'issuenote' && C4::Context->preference('AllowCheckoutNotes') ) {
+    if ( $op eq 'cud-add_note' && C4::Context->preference('AllowCheckoutNotes') ) {
         my $scrubber = C4::Scrubber->new();
         my $note = $query->param('note');
         my $issue_id = $query->param('issue_id');