diff --git a/devel/cvsweb/Makefile b/devel/cvsweb/Makefile
index 7d26bb8ea384..8c43adfa926e 100644
--- a/devel/cvsweb/Makefile
+++ b/devel/cvsweb/Makefile
@@ -14,6 +14,8 @@ MASTER_SITE_SUBDIR=	knu
 
 MAINTAINER=	knu@FreeBSD.org
 
+FORBIDDEN=	"due to cross-site scripting vulnerabilities"
+
 NO_BUILD=	yes
 
 USE_PERL5=	yes
diff --git a/devel/cvsweb3/Makefile b/devel/cvsweb3/Makefile
index 7d26bb8ea384..8c43adfa926e 100644
--- a/devel/cvsweb3/Makefile
+++ b/devel/cvsweb3/Makefile
@@ -14,6 +14,8 @@ MASTER_SITE_SUBDIR=	knu
 
 MAINTAINER=	knu@FreeBSD.org
 
+FORBIDDEN=	"due to cross-site scripting vulnerabilities"
+
 NO_BUILD=	yes
 
 USE_PERL5=	yes