Adobe Experience Manager suffers from a DOM-based Cross-Site Scripting (XSS) vulnerability that allows attackers to execute malicious JavaScript by manipulating the DOM environment. Exploitation requires user interaction, specifically visiting a crafted webpage. The vulnerability changes the security scope and has a medium severity rating.