Paragraphs Edit adds contextual edit, clone, and delete links, along with the required routes, to individual Paragraphs. The module doesn't…

Paragraphs Edit adds contextual edit, clone, and delete links, along with the required routes, to individual Paragraphs.

The module doesn't sufficiently check access on the edit and delete routes for a paragraph.

This vulnerability is mitigated by the fact that an attacker must have an account on the site and must know or guess the ID of the paragraph. No special permission is required.