template injection vulnerabilities and exploits