diff --git a/http/cves/2020/CVE-2020-35987.yaml b/http/cves/2020/CVE-2020-35987.yaml
index 14e50a21e4..996f43445c 100644
--- a/http/cves/2020/CVE-2020-35987.yaml
+++ b/http/cves/2020/CVE-2020-35987.yaml
@@ -17,7 +17,7 @@ info:
     cwe-id: CWE-79
   metadata:
     verified: true
-  tags: cve,cve2020,rukovoditel,xss,authenticated
+  tags: cve,cve2020,rukovoditel,xss,stored-xss,authenticated
 
 http:
   - raw:
diff --git a/http/cves/2022/CVE-2022-43164.yaml b/http/cves/2022/CVE-2022-43164.yaml
index 8afb4901bd..a6bb6ff6d1 100644
--- a/http/cves/2022/CVE-2022-43164.yaml
+++ b/http/cves/2022/CVE-2022-43164.yaml
@@ -19,7 +19,7 @@ info:
     verified: "true"
     shodan-query: http.favicon.hash:-1499940355
     max-request: 3
-  tags: cve,cve2022,rukovoditel,stored,xss,authenticated
+  tags: cve,cve2022,rukovoditel,stored-xss,xss,authenticated
 
 http:
   - raw:
diff --git a/http/cves/2022/CVE-2022-43165.yaml b/http/cves/2022/CVE-2022-43165.yaml
index f316ac4f11..40009003ab 100644
--- a/http/cves/2022/CVE-2022-43165.yaml
+++ b/http/cves/2022/CVE-2022-43165.yaml
@@ -18,7 +18,7 @@ info:
   metadata:
     verified: true
     shodan-query: http.favicon.hash:-1499940355
-  tags: cve,cve2022,rukovoditel,xss,authenticated
+  tags: cve,cve2022,rukovoditel,stored-xss,xss,authenticated
 http:
   - raw:
       - |
diff --git a/http/cves/2022/CVE-2022-43166.yaml b/http/cves/2022/CVE-2022-43166.yaml
index 8712f72c85..850177753b 100644
--- a/http/cves/2022/CVE-2022-43166.yaml
+++ b/http/cves/2022/CVE-2022-43166.yaml
@@ -17,7 +17,7 @@ info:
     cwe-id: CWE-79
   metadata:
     verified: true
-  tags: cve,cve2022,rukovoditel,xss,authenticated
+  tags: cve,cve2022,rukovoditel,stored-xss,xss,authenticated
 
 http:
   - raw:
diff --git a/http/cves/2022/CVE-2022-43169.yaml b/http/cves/2022/CVE-2022-43169.yaml
index b45ddcd568..7c8ae41874 100644
--- a/http/cves/2022/CVE-2022-43169.yaml
+++ b/http/cves/2022/CVE-2022-43169.yaml
@@ -17,7 +17,7 @@ info:
     cwe-id: CWE-79
   metadata:
     verified: true
-  tags: cve,cve2022,rukovoditel,xss,authenticated
+  tags: cve,cve2022,rukovoditel,stored-xss,xss,authenticated
 http:
   - raw:
       - |
diff --git a/http/cves/2022/CVE-2022-43170.yaml b/http/cves/2022/CVE-2022-43170.yaml
index 3e45934dcf..3487ba0aea 100644
--- a/http/cves/2022/CVE-2022-43170.yaml
+++ b/http/cves/2022/CVE-2022-43170.yaml
@@ -17,7 +17,7 @@ info:
     cwe-id: CWE-79
   metadata:
     verified: true
-  tags: cve,cve2022,rukovoditel,xss,authenticated
+  tags: cve,cve2022,rukovoditel,stored-xss,xss,authenticated
 
 http:
   - raw:
diff --git a/http/cves/2022/CVE-2022-43185.yaml b/http/cves/2022/CVE-2022-43185.yaml
index 83416143de..7c5d638e81 100644
--- a/http/cves/2022/CVE-2022-43185.yaml
+++ b/http/cves/2022/CVE-2022-43185.yaml
@@ -17,7 +17,7 @@ info:
     cwe-id: CWE-79
   metadata:
     verified: true
-  tags: cve,cve2022,rukovoditel,xss,authenticated
+  tags: cve,cve2022,rukovoditel,stored-xss,xss,authenticated
 http:
   - raw:
       - |
diff --git a/http/cves/2022/CVE-2022-44944.yaml b/http/cves/2022/CVE-2022-44944.yaml
index 5802278e39..cdde910d64 100644
--- a/http/cves/2022/CVE-2022-44944.yaml
+++ b/http/cves/2022/CVE-2022-44944.yaml
@@ -18,7 +18,7 @@ info:
   metadata:
     verified: true
     shodan-query: http.favicon.hash:-1499940355
-  tags: cve,cve2022,rukovoditel,xss,authenticated
+  tags: cve,cve2022,rukovoditel,stored-xss,xss,authenticated
 
 http:
   - raw:
diff --git a/http/cves/2022/CVE-2022-44946.yaml b/http/cves/2022/CVE-2022-44946.yaml
index 0801892bf4..20e40fab41 100644
--- a/http/cves/2022/CVE-2022-44946.yaml
+++ b/http/cves/2022/CVE-2022-44946.yaml
@@ -18,7 +18,7 @@ info:
   metadata:
     verified: true
     shodan-query: http.favicon.hash:-1499940355
-  tags: cve,cve2022,rukovoditel,xss,authenticated
+  tags: cve,cve2022,rukovoditel,stored-xss,xss,authenticated
 
 http:
   - raw:
diff --git a/http/cves/2022/CVE-2022-44949.yaml b/http/cves/2022/CVE-2022-44949.yaml
index 2cb5e694f9..e489ae03bd 100644
--- a/http/cves/2022/CVE-2022-44949.yaml
+++ b/http/cves/2022/CVE-2022-44949.yaml
@@ -17,7 +17,7 @@ info:
     cwe-id: CWE-79
   metadata:
     verified: true
-  tags: cve,cve2022,rukovoditel,xss,authenticated
+  tags: cve,cve2022,rukovoditel,stored-xss,xss,authenticated
 
 http:
   - raw:
diff --git a/http/cves/2022/CVE-2022-44950.yaml b/http/cves/2022/CVE-2022-44950.yaml
index b0857fad91..4688775a8f 100644
--- a/http/cves/2022/CVE-2022-44950.yaml
+++ b/http/cves/2022/CVE-2022-44950.yaml
@@ -17,7 +17,7 @@ info:
     cwe-id: CWE-79
   metadata:
     verified: true
-  tags: cve,cve2022,rukovoditel,xss,authenticated
+  tags: cve,cve2022,rukovoditel,stored-xss,xss,authenticated
 
 http:
   - raw:
diff --git a/http/cves/2022/CVE-2022-44952.yaml b/http/cves/2022/CVE-2022-44952.yaml
index 868fa826c6..581ba7e576 100644
--- a/http/cves/2022/CVE-2022-44952.yaml
+++ b/http/cves/2022/CVE-2022-44952.yaml
@@ -17,7 +17,7 @@ info:
     cwe-id: CWE-79
   metadata:
     verified: true
-  tags: cve,cve2022,rukovoditel,xss,authenticated
+  tags: cve,cve2022,rukovoditel,stored-xss,xss,authenticated
 
 http:
   - raw: