 The website includes a prompt injection instructing the LLM to capture sensitive content from either the website or from the user's conversation.  From there the LLM can encode the sensitive data and send it out to an attacker- controlled serve An LLM allows users to craft SQL queries for a backend database through a chat-like feature.  A user requests a query to delete all database tables.  If the crafted query from the LLM is not scrutinized, then all database tables would be deleted A malicious user instructs the LLM to return a JavaScript payload back to a user, without sanitization controls.  This can occur either through a sharing a prompt, prompt injected website, or chatbot that accepts prompts from a URL parameter