TI-2017-14338 CVE-2017-20274 · GHSA-ffqv-8fvq-3j4gJoomla LMS King Professional 3.2.4.0 SQL Injection via learningpathPriority HIGH 77Joomla LMS King Professional 3.2.4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cp_id parameter.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00432 · Published 2026-06-19 · No fix listed CWE-89