EnvInjection: Environmental Prompt Injection Attack to Multi-modal Web Agents. - Xilong Wang; John Bloch; Zedian Shao; Yuepeng Hu; Shuyan Zhou; Neil Zhenqiang Gong (CoRR, 2025)