# CVEs published 2023-06-24

5 CVEs were published on June 24, 2023: 2 critical, 2 high. Days are UTC.

- [CVE-2023-3387](https://cve.now/CVE-2023-3387.md): Lana Text to Image \<= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, lanacodes Lana Text to Image)
- [CVE-2023-3388](https://cve.now/CVE-2023-3388.md): Beautiful Cookie Consent Banner \<= 2.10.1 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2, nikelschubert Beautiful Cookie Consent Banner)
- [CVE-2023-3197](https://cve.now/CVE-2023-3197.md): MStore API \<= 4.0.1 - Unauthenticated SQL Injection (CVSS 9.8, inspireui MStore API – Create Native Android & iOS Apps On…)
- [CVE-2023-1722](https://cve.now/CVE-2023-1722.md): Yoga Class Registration System 1.0 - ATO (CVSS 9.1, Yoga Class Registration System)
- [CVE-2023-1724](https://cve.now/CVE-2023-1724.md): Faveo Helpdesk Enterprise 6.0.1 - Privilege Escalation via Stored XSS (CVSS 7.3, Ladybirdweb Faveo Helpdesk)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-06-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.