See how king-products compares to other vendors in security performance
Joomla LMS King Professional 3.2.4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cpid parameter. Attackers can send GET requests to index.php with the option=comlmsking, view=lmsking, layout=learningpath, and task=learningPath parameters to extract sensitive database information.
SQLi vulnerability in LMS Lite component for Joomla.