OWASP
From charlesreid1
Top web vulnerabilities: 2013 (nothing more recent...)
https://www.owasp.org/index.php/Top_10_2013
https://www.owasp.org/index.php/Top_10
CSRF: https://www.owasp.org/index.php/Top_10_2013-A8-Cross-Site_Request_Forgery_%28CSRF%29