Just to confirm that, after upgrading from cvs xotcl-core, xowiki, acs-tcl and the suggested dependencies , the csrf error disappeared.
I decided to stick to naviserver-4.99.14 to avoid stopping the other instances running on the server.
Thank You very much Gustaf for the usual prompt support.
Claudio