An example proof of concept to show bad programming practice in nodejs that allows for user supplied data to be executed on the server.
A real world example of how an XSS in the administration portal of a WordPress instance can lead to an RCE by uploading a webshell using the XSS.