diff --git a/website/docs/changelog/0.3.8.md b/website/docs/changelog/0.3.8.md
index 26a32d30..552557a3 100644
--- a/website/docs/changelog/0.3.8.md
+++ b/website/docs/changelog/0.3.8.md
@@ -12,6 +12,7 @@ Not yet released.
 
 
 ### 💅 Polish
+- `x-csrftoken` is added to all forms on the OpenAdmin interface for [CSRF](https://portswigger.net/web-security/csrf) protection.
 - Redesigned OpenAdmin Dashboard page.
 - Suspending user will now redirect all their domains to custom [suspended_user.html](https://github.com/stefanpejcic/openpanel-configuration/blob/main/nginx/suspended_user.html) template.
 - OpenPanel can now be updated [directly from Github](/docs/admin/intro/#manual-updates).