Comment by conradev

But if there is a persistence or network layer involved, when compromised, it could function as an injection vector into the application, right?