Access violation vulnerability in BM Content Builder 3.16.2.1

The BM Content Builder plugin for WordPress has a security issue where someone could change the data without permission. This is because the ‘ux_cb_page_options_save’ function does not have a check for the right permissions. This means that someone who is logged in and has at least subscriber-level access could add harmful code to a page that will run whenever someone visits that page.