To exploit the vulnerability an attacker will alter a variable that is passed to one of these functions to cause it to include malicious code from a remote resource. To mitigate this vulnerability all user input needs to be validated before being used.
An attacker might manipulate a variable passed to certain functions to embed malicious code from external sources. To safeguard against this vulnerability, all user inputs should be checked and validated prior to their use.