diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt
index 8630431d5c..85393f33ae 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt
@@ -132,6 +132,7 @@
                                                 <div class="modal-footer">
                                                     <button type="button" class="btn btn-primary" data-dismiss="modal">Cancel</button>
                                                     <form action="/cgi-bin/koha/acqui/basket.pl" method="post">
+                                                        [% INCLUDE 'csrf-token.inc' %]
                                                         <input type="hidden" name="op" value="cud-delete_confirm" />
                                                         <input type="hidden" name="basketno" value="[% basketno | html %]" />
                                                         <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
@@ -150,6 +151,7 @@
                                                 <div class="modal-footer">
                                                     <button type="button" class="btn btn-primary" data-dismiss="modal">Cancel</button>
                                                     <form action="/cgi-bin/koha/acqui/basket.pl" method="post">
+                                                        [% INCLUDE 'csrf-token.inc' %]
                                                         <input type="hidden" name="op" value="cud-delete_confirm" />
                                                         <input type="hidden" name="basketno" value="[% basketno | html %]" />
                                                         <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
@@ -158,6 +160,7 @@
                                                     </form>
 
                                                     <form action="/cgi-bin/koha/acqui/basket.pl" method="post">
+                                                        [% INCLUDE 'csrf-token.inc' %]
                                                         <input type="hidden" name="op" value="cud-delete_confirm" />
                                                         <input type="hidden" name="basketno" value="[% basketno | html %]" />
                                                         <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />