Adobe Experience Manager contains a reflected Cross-Site Scripting (XSS) vulnerability that allows a low-privileged attacker to execute malicious JavaScript in the context of a victim's browser if the victim is tricked into visiting a crafted URL. The vulnerability affects the scope of the application and can lead to partial confidentiality and integrity impact without availability loss.