diff --git a/core/static/javascript/great.task-validation.js b/core/static/javascript/great.task-validation.js
index a8811bea7b..c6f470b83e 100644
--- a/core/static/javascript/great.task-validation.js
+++ b/core/static/javascript/great.task-validation.js
@@ -55,14 +55,19 @@ GreatFrontend.TaskValidation = {
                 button.addEventListener('click', async (e) => {
                   e.preventDefault()
 
+                  const csrfToken = document.querySelector(
+                    '[name=csrfmiddlewaretoken]'
+                  ).value
+
                   try {
                     await fetch('/contact/task-validation', {
                       method: 'POST',
                       headers: {
                         'Content-Type': 'application/json',
+                        'X-CSRFToken': csrfToken,
                       },
                       body: JSON.stringify({
-                        question: question,
+                        question: question.innerHTML,
                         answer: button.innerText,
                       }),
                     })