CORS Misconfiguration PoC
If you're logged into the target app, your private data will be stolen.