The vulnerable kits also offer a point of entry to compromise legitimate website servers.
Source: Threadpost