Up to £23m of issued parking fines potentially ‘unlawful’