Abhirup Guha

**Name of the Vulnerable Software and Affected Versions** tCredence Analytics iDEAL Wealth and Funds version 1.0 **Description** The issue allows authenticated remote attackers to inject a payload via the `v` parameter in the "/Framewrk/Home.jsp" file using the POST method. **Recommendations** For version 1.0, avoid using the `v` parameter in the "/Framewrk/Home.jsp" file until the issue is resolved. As a temporary workaround, consider restricting access to the "/Framewrk/Home.jsp" file to minimize the risk of exploitation.