A Cross-Modal Prompt Injection Attack against Large Vision-Language Models with Image-Only Perturbation. - Hao Yang; Zhuo Ma 001; Yang Liu 003; Yilong Yang 004; Guancheng Wang 005; Jianfeng Ma 001 (CoRR, 2026)