If the algebra filter was enabled but not functional (eg the necessary binaries were missing from the server), it presented an XSS risk.