The noun cross-site request forgery can be countable or uncountable.
The singular form of cross-site request forgeries is cross-site request forgery.