When AI Meets the Web: Prompt Injection Risks in Third-Party AI Chatbot Plugins