@article{whenaimeetsthewebpromptinjectionrisksint,
  title = {When AI Meets the Web: Prompt Injection Risks in Third-Party AI Chatbot Plugins},
  author = {Yigitcan Kaya and Anton Landerer and Stijn Pletinckx and Michelle Zimmermann and Christopher Kruegel and Giovanni Vigna},
  year = {2025},
  eprint = {2511.05797},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2511.05797},
}