Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that allows an attacker to execute malicious JavaScript in the victim's browser by manipulating the DOM environment. Exploitation requires user interaction, specifically visiting a crafted webpage. The vulnerability changes the security scope and has a medium severity rating.