Adobe Experience Manager has a DOM-based Cross-Site Scripting (XSS) vulnerability that allows an attacker to execute malicious JavaScript in the victim's browser by manipulating the DOM environment. Exploitation requires the victim to visit a specially crafted webpage. The vulnerability affects the confidentiality and integrity of data but does not impact availability.