This vulnerability in altima-interactive's Altima Lookbook Free for WooCommerce plugin allows reflected cross-site scripting due to improper input neutralization during web page generation. It affects all versions up to 1.1.0. The issue enables attackers to inject malicious scripts that are reflected back to users, potentially leading to script execution in the context of the affected website. No patch or official fix information is currently available.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of users visiting the affected site, potentially leading to session hijacking, defacement, or other client-side impacts. However, no known exploits are reported, and the exact impact depends on the context in which the vulnerability is triggered.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider applying temporary mitigations such as input validation or output encoding on affected parameters if feasible.