A Cross-Site Scripting (XSS) vulnerability exists in the ThemeGrill User Registration plugin up to version 5.3.0. The flaw involves improper neutralization of script-related HTML tags, allowing an attacker to inject code. This vulnerability has a CVSS score of 5.3, indicating medium severity, and affects confidentiality but not integrity or availability.