Filters apply as you choose them.
The Participants Database plugin before 1.7.5.10 for WordPress has XSS.