Can you break down how prompt injection vulnerabilities work in simple terms so I can explain cybersecurity risks to my high school computer science students during our weekend club?