This is expressly covered in the article ("02.2 - Remote exploitation"). No, in answer to your question, an iFrame on a website you visit can execute commands

This is expressly covered in the article ("02.2 - Remote exploitation"). No, in answer to your question, an iFrame on a website you visit can execute commands on your LAN accessible MyCloud.