A real world example of how an XSS in the administration portal of a WordPress instance can lead to an RCE by uploading a webshell using the XSS.
Simple VBScript using XMLHTTP to fetch usernames from a WordPress installation using the ?author=
redirect feature.