 This then causes the LLM to solicit sensitive information from the user and perform exfiltration via embedded JavaScript or Markdown A malicious user uploads a resume with a prompt injection.  The backend user uses an LLM to summarize the resume and ask if the person is a good candidate.  Due to the prompt injection, the LLM says yes, despite the actual resume contents A user enables a plugin linked to an e-commerce site.  A rogue instruction embedded on a visited website exploits this plugin, leading to unauthorized purchases.  Reference Links ChatGPT Plugin Vulnerabilities - Chat with Code: https://embracethered