diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/itemsearch.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/itemsearch.tt
index 9d21f5b2c8..660c7064d2 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/itemsearch.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/itemsearch.tt
@@ -279,8 +279,10 @@
         </div>
       </div>
 
-        <form method="GET" action="/cgi-bin/koha/tools/batchMod.pl" id="batch_item_operations">
-            <input type="hidden" name="op" value="show" />
+        <form method="POST" action="/cgi-bin/koha/tools/batchMod.pl" id="batch_item_operations">
+            <!-- dummy values which will be replaced by JavaScript -->
+            [% INCLUDE 'csrf-token.inc' %]
+            <input type="hidden" name="op" value="cud-show" />
             <input type="hidden" id="batch_mod_del" name="del" value="0" />
         </form>
 
@@ -694,7 +696,12 @@
                 batch_mod_form.append(
                     $("<input>").attr("type","hidden")
                     .attr("name", "op")
-                    .val("show")
+                    .val("cud-show")
+                );
+                batch_mod_form.append(
+                    $("<input>").attr("type","hidden")
+                    .attr("name", "csrf_token")
+                    .val($('meta[name="csrf-token"]').attr('content'))
                 );
                 batch_mod_form.append(
                     $("<input>").attr("type","hidden")