EIP-2026-109149

This is a writeup describing a CORS misconfiguration vulnerability in Limo Booking Software v1.0. The application allows access from any domain due to missing Vary: Origin header, potentially enabling cache poisoning attacks.