WYSIWYG editors can help you create content and web pages with no knowledge of HTML principles, making it a holy grail tool for developers. Froala is a lightweight, open-source tool loaded with a tonne of features and plugins for turning the web page-making process into a seamless experience. It supports all popular third-party tools such as Code Mirror, Embedly Integration, TUI Advanced Image Editor, Codox Real-Time Editing, and more.

WYSIWYG HTML Editors: Froala Vs. CKEditor

Geeky Gadgets
12:00 pm
Just a quick reminder for our readers on the awesome deal on the WYSIWYG Web Builder 17 Plus Bundle in the Geeky Gadgets Deals store this week. The WYSIWYG Web Builder 17 Plus Bundle is available in our deals store for $89.99, which is a saving of 64% off the normal price. WYSIWYG Web Builder is an all-in-one software solution that can be used to create complete websites. What-You-See-Is-What-You-Get means that all page elements will be displayed in the same position as in the designer. Unlike fluid (dynamic) layouts, objects depend on the position and size of the objects surrounding them. WYSIWYG Web Builder generates HTML, HTML5, or XHTML tags while you point and click on desired functions. Just drag and drop objects to the page, position them ‘anywhere’ you want, and when you’re finished, publish it to your web server (using the built-in Publish tool). The software gives you full control over the content and layout of your web pages. This bundle does not only give you a license for WYSIWTG Web Builder 17 but also offers 7 extension packs (a total of 65 paid extensions) to bring your website to life. Responsive web design. With support for layout grid, flexbox, CSS grid & fixed layouts with breakpoints
Web fonts. Easily add Google Fonts & other Web Fonts to your website
Animations. More than 150 pre-defined animations & transitions
Pre-made blocks. Quickly get started with 150+ blocks
Forms tools. Send Emails, Upload Files, Store Data in MySQL or CSV, Auto Responder, Form Validation, Conditons/Calculations
Images & media. Image filters, shapes, galleries, carousels, lightboxes, rollover animations, YouTube, Vimeo, HTML5, Video/Audio
Icon libraries. Support for Font Awesome, Material Icons & many other icon libraries
Navigation. Navigation buttons, drop down menus, fullscreen menu, mega menu, panel menu, breadcrumb, pagination, & much more
Extensions. Hundreds of extensions including slideshows, navigation, audio/video, webshops, data viewers, etc
One-click publishing. No external FTP program needed. No special hosting required. Supports Secure FTP, FTPS and standard FTP
Drag & drop. Visually design your website, HTML code will be automatically generated
SEO tools. Helps you to make your web pages more search engine friendly
Password protect pages. Multi-user login tools. Sign Up, Password Recovery, Online User Administrator, User Roles, etc
CMS. Built-in (PHP based) Content Management System to allow you or your customers to manage content online
eCommerce. Integrated support for third party ecommerce solutions like PayPal, Ecwid, Stripe, Snipcart, Paddle, Gumroad, WebMoney, & Vibracart Pro
You can find out more information on this great deal on the WYSIWYG Web Builder 17 Plus Bundle over at our deals store at the link below.

Deals Reminder : The WYSIWYG Web Builder 17 Plus Bundle, save 64%

Geeky Gadgets
1:00 pm
There is a great deal on the WYSIWYG Web Builder 17 Plus Bundle in the Geeky Gadgets Deals store this week. The WYSIWYG Web Builder 17 Plus Bundle is available in our deals stor for $89.99, that is a saving of 64% off the normal price. WYSIWYG Web Builder is an all-in-one software solution that can be used to create complete websites. What-You-See-Is-What-You-Get means that all page elements will be displayed in the same position as in the designer. Unlike fluid (dynamic) layouts, objects depend on the position and size of the objects surrounding them. WYSIWYG Web Builder generates HTML, HTML5, or XHTML tags while you point and click on desired functions. Just drag and drop objects to the page, position them ‘anywhere’ you want, and when you’re finished, publish it to your web server (using the built-in Publish tool). The software gives you full control over the content and layout of your web pages. This bundle does not only give you a license for WYSIWTG Web Builder 17 but also offers 7 extension packs (a total of 65 paid extensions) to bring your website to life. Responsive web design. With support for layout grid, flexbox, CSS grid & fixed layouts with breakpoints
Web fonts. Easily add Google Fonts & other Web Fonts to your website
Animations. More than 150 pre-defined animations & transitions
Pre-made blocks. Quickly get started with 150+ blocks
Forms tools. Send Emails, Upload Files, Store Data in MySQL or CSV, Auto Responder, Form Validation, Conditons/Calculations
Images & media. Image filters, shapes, galleries, carousels, lightboxes, rollover animations, YouTube, Vimeo, HTML5, Video/Audio
Icon libraries. Support for Font Awesome, Material Icons & many other icon libraries
Navigation. Navigation buttons, drop down menus, fullscreen menu, mega menu, panel menu, breadcrumb, pagination, & much more
Extensions. Hundreds of extensions including slideshows, navigation, audio/video, webshops, data viewers, etc
One-click publishing. No external FTP program needed. No special hosting required. Supports Secure FTP, FTPS and standard FTP
Drag & drop. Visually design your website, HTML code will be automatically generated
SEO tools. Helps you to make your web pages more search engine friendly
Password protect pages. Multi-user login tools. Sign Up, Password Recovery, Online User Administrator, User Roles, etc
CMS. Built-in (PHP based) Content Management System to allow you or your customers to manage content online
eCommerce. Integrated support for third party ecommerce solutions like PayPal, Ecwid, Stripe, Snipcart, Paddle, Gumroad, WebMoney, & Vibracart Pro
You can find out more information on this great deal on the WYSIWYG Web Builder 17 Plus Bundle over at our deals store at the link below.

Deals: The WYSIWYG Web Builder 17 Plus Bundle, save 64%

Remember WYSIWYG ? What you see is what you get. That was a simpler time in technology; you knew what the end result would be during the development stage. There were no surprises. Technology moved on, though. Now, the mantra should be, “don’t automatically believe what you see.”
Deep fakes, propaganda, misinformation and disinformation campaigns are everywhere, designed to con users into making mistakes. It’s a security problem, but one that goes far beyond malware and ransomware. These social engineering campaigns have a direct impact on humans’ daily life and society at large. In March 2021, the FBI released a Private Industry Notification warning the public that “Malicious actors almost certainly will leverage synthetic content for cyber and foreign influence operations in the next 12 to 18 months. Foreign actors are currently using synthetic content in their influence campaigns, and the FBI anticipates it will be increasingly used by foreign and criminal cyber actors for spearphishing and social engineering in an evolution of cyber operational tradecraft.”
In a webinar offered by Cato Networks, Raymond Lee, CEO of FakeNet.AI, and Etay Maor, senior director of security strategy at Cato Networks, discussed how and why cybercriminals are using this type of social engineering campaign. Not all Fake Information is the Same
When discussing cybersecurity, we tend to discuss three main elements: people, processes and technology. The focus tends to be on the technology side—what technologies are we protecting and what technologies are available to advance cybersecurity efforts, for instance—but it is really the processes and the people that are the targets of threat actors. That’s why social engineering is so successful. Cybercriminals use technology to attack people and processes. From the cybersecurity professional perspective, social engineering is difficult to combat because it does rely so heavily on human behavior. So, different tactics are required when dealing with social engineering and human behavior, and the main focus is to understand the agenda behind the fake information. There is a tendency to use the terms for false information interchangeably, but it is important to understand the differences. It all begins with propaganda. Propaganda is a popular political tool to spread skewed information to grow an ideological base. It is based on facts, but the facts are used selectively so the whole picture isn’t presented. Then, there are the subsets of propaganda that we see most frequently in social engineering—misinformation and disinformation. Misinformation is false or inaccurate information. Often, with misinformation, real data is presented but done so in a way that manipulates reality. This was a serious problem at the height of the COVID-19 pandemic. For example, using the basic fact that COVID-19 is spread through airborne particles, threat actors and others created misinformation campaigns about how you could (or couldn’t) become infected. That one tidbit of knowledge was enough for many to believe it, and threat actors were able to push successful social engineering campaigns. Disinformation, on the other hand, is false information designed to mislead and distort the truth. It is often used by nation-state actors to plant the seeds of false information on social media outlets, which is then spread until the false information is considered truth. There is a thin line between misinformation and disinformation. Disinformation tends to be designed to get an emotional response through presenting correlated ideas and creating a false causation—for example, an ad shows that X number of people die as a result of terrorist attacks for every Y number of people in the U.S. that die from lack of health care. Both statements alone are true, but they have no connection to each other. Yet, the person who created the ad wanted to create outrage. Three Elements of Information Manipulation
There are three common elements used to manipulate information for social engineering purposes. They are:
• Missing context. Information is presented in a misleading way or some vital facts are missing. This is commonly manifested on social media as presenting a photo that has nothing to do with its caption. For example, a picture showing violence on a city street with the caption: “See what is happening across America today!” But the picture was, in fact, taken in a European city. • Deceptive editing. Here, the threat actor is taking something that was once a genuine photo, video or illustration of a media story or event but editing key elements, so it distorts the reality to create a different message. • Malicious transformation. This is the most serious of the three. Videos are altered through AI to create something fake that appears real. These are deep fakes. Threat actors use these techniques to push an agenda, whether it is a ransomware campaign for financial gain or to manipulate social outcomes like elections. Recognizing how this information is used for social engineering is vital for security awareness training. The bad guys will use humans and processes to get to the technology, and they will manipulate the truth to do it. Recent Articles By Author

Propaganda as a Social Engineering Tool

The security flaw was found in how HTML sanitizing is performed. A cross-site scripting (XSS) vulnerability has been found in a WYSIWYG editor used by at least 30,000 websites. Security
Froala is a lightweight What-You-See-Is-What-You-Get (WYSIWYG) HTML rich text editor for developers and content creators. Wappalyzer estimates that Froala is in use by approximately 30,000 web domains. According to Bishop Fox, the WYSIWYG editor contains a security flaw in its HTML sanitization parsing protocol, allowing attackers to bypass existing XSS protections. The vulnerability can be triggered by inserting a JavaScript payload in an HTML event handler within specific HTML and MathML tags, which will cause the parser to mutate the payload into JavaScript commands. "The XSS is caused by a confusion during the HTML parsing sequence," Davis said. "The < math > tag causes the parser to switch its namespace context from HTML to MathML, which does not parse in the same manner as HTML. The < iframe > and embedded HTML comment < !-- causes the parser to switch context during the tokenization phase of HTML parsing and read the strings that follow as user data (RCDATA) rather than computer instructions." Bishop Fox
As a result, XSS can be triggered. Cross-site scripting attacks often allow attackers to act as a victim user when they interact with a vulnerable application, and consequences can range from privilege escalation to data leaks or, in the worst scenarios, actions such as forcing an unauthorized fund transfer. "In Froala's case the vulnerability may reflect itself as either stored or reflected depending on the application that uses it and therefore the impact will vary," the researcher says. "The context of the application leveraging Froala will also dictate the impact of the vulnerability." CVE-2021-28114 was first discovered on February 26 and Froala was contacted on March 4. The vendor developed and released a patch in version 3.2.7 on May 18, however, Bishop Fox retested the software and found that the bug, in some configurations, had not been fully resolved. While a public disclosure timeline extension was offered, no adjustments were made. When contacted, the vendor pointed us to the  changelog . XSS bugs were previously patched in versions 3.2.2 and 3.2.3. To mitigate the risk of this vulnerability, users should upgrade to at least version 3.2.7. The latest version available, v.4.0, was released on June 1.

Predict your next investment

Wysiwyg

See what CB Insights has to offer

About Wysiwyg

Wysiwyg Headquarter Location

Latest Wysiwyg News

Predict your next investment

CB Insights uses Cookies