The high-severity cross-site scripting flaws could allow remote-code injection on QNAP NAS systems.
Source: Threadpost