Reusable CSRF Token
ClientPortal includes a token in its payment form, but DevTools reveals that the same public value is reused. The external site can submit the known value in its own form.
Objective
Inspect the victim form to learn the token value, then use the attacker page to replay it in a cross-site request.