WebInject: Prompt Injection Attack to Web Agents