Sure. Under that perspective, it's basically a new vector for XSS attacks.