diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/suggestion/suggestion.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/suggestion/suggestion.tt
index 649874488c..9fece69d0b 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/suggestion/suggestion.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/suggestion/suggestion.tt
@@ -845,9 +845,9 @@
                                                     </td>
                                                     <td class="actions">
                                                         <div class="btn-group dropup">
-                                                            <a class="btn btn-default btn-xs" role="button" href="suggestion.pl?suggestionid=[% s.suggestionid | html %]&amp;op=edit"><i class="fa-solid fa-pencil" aria-hidden="true"></i> Edit</a><a class="btn btn-default btn-xs dropdown-toggle" id="more_actions_[% s.suggestionid | html %]" role="button" data-toggle="dropdown" href="#"><b class="caret"></b></a>
+                                                            <a class="btn btn-default btn-xs" role="button" href="suggestion.pl?suggestionid=[% s.suggestionid | html %]&amp;csrf_token=[% csrf_token | html %]&amp;op=edit"><i class="fa-solid fa-pencil" aria-hidden="true"></i> Edit</a><a class="btn btn-default btn-xs dropdown-toggle" id="more_actions_[% s.suggestionid | html %]" role="button" data-toggle="dropdown" href="#"><b class="caret"></b></a>
                                                             <ul class="dropdown-menu pull-right" role="menu" aria-labelledby="more_actions_[% s.suggestionid | html %]">
-                                                                <li><a class="deletesuggestion" href="suggestion.pl?op=delete&amp;suggestionid=[% s.suggestionid | html %]"><i class="fa fa-trash-can"></i> Delete</a></li>
+                                                                <li><a class="deletesuggestion" href="suggestion.pl?op=delete&amp;suggestionid=[% s.suggestionid | html %]"&amp;csrf_token=[% csrf_token | html %]><i class="fa fa-trash-can"></i> Delete</a></li>
                                                                 [% UNLESS s.archived %]
                                                                     <li><a class="archivesuggestion" href="suggestion.pl?op=archive&amp;suggestionid=[% s.suggestionid | html %]"><i class="fa fa-archive"></i> Archive</a></li>
                                                                 [% ELSE %]
diff --git a/suggestion/suggestion.pl b/suggestion/suggestion.pl
index 36a9f063af..6ece2e12b6 100755
--- a/suggestion/suggestion.pl
+++ b/suggestion/suggestion.pl
@@ -33,6 +33,7 @@ use Koha::Acquisition::Currencies;
 use Koha::Libraries;
 use Koha::Patrons;
 use Koha::Suggestions;
+use Koha::Token;
 
 use URI::Escape qw( uri_escape );
 
@@ -531,10 +532,17 @@ foreach my $field ( qw(managedby acceptedby suggestedby budgetid) ) {
     $hashlists{ lc($field) . "_loop" } = \@codes_list;
 }
 
+my $csrf_token = Koha::Token->new->generate_csrf(
+    {
+        session_id => scalar $input->cookie('CGISESSID'),
+    }
+);
+
 $template->param(
     %hashlists,
-    borrowernumber           => ($input->param('borrowernumber') // undef),
-    SuggestionStatuses       => GetAuthorisedValues('SUGGEST_STATUS'),
+    borrowernumber     => ( $input->param('borrowernumber') // undef ),
+    SuggestionStatuses => GetAuthorisedValues('SUGGEST_STATUS'),
+    csrf_token         => $csrf_token,
 );
 output_html_with_http_headers $input, $cookie, $template->output;