Medium 6.5
2026-01-22< 3.16.3.3
CVE-2025-69055
Minimum safe version
3.16.3.3
Update to 3.16.3.3 or later to address 4 fixable vulnerabilities
CVE-2025-69055
CVE-2025-59002
BM Content Builder <= 3.16.2.1 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via ux_cb_page_options_save
BM Content Builder <= 3.16.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update