MW/Freegift RCE vulnerability

MW/Freegift extension for Magento 1.x is vulnerable to RCE via unprotected user input. It is strongly recommended to disable the extension and request a fixed version from the extension developers.