An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access Launcher Configuration Panel.
https://www.starpracticemanagement.com/
https://excellium-services.com/cert-xlm-advisory/CVE-2020-28402