diff --git a/internal-api/admin/api-authentication/index.php b/internal-api/admin/api-authentication/index.php
index 8692b19b..4908246a 100644
--- a/internal-api/admin/api-authentication/index.php
+++ b/internal-api/admin/api-authentication/index.php
@@ -7,6 +7,7 @@ require_once(HESK_PATH . 'inc/common.inc.php');
 require_once(HESK_PATH . 'inc/admin_functions.inc.php');
 require_once(INTERNAL_API_PATH . 'core/output.php');
 require_once(INTERNAL_API_PATH . 'dao/api_authentication_dao.php');
+require_once(INTERNAL_API_PATH . 'core/cors.php');
 
 hesk_session_start();
 hesk_load_internal_api_database_functions();
diff --git a/internal-api/admin/api-settings/index.php b/internal-api/admin/api-settings/index.php
index d2d241bc..0c54b28d 100644
--- a/internal-api/admin/api-settings/index.php
+++ b/internal-api/admin/api-settings/index.php
@@ -7,6 +7,7 @@ require_once(HESK_PATH . 'inc/common.inc.php');
 require_once(HESK_PATH . 'inc/admin_functions.inc.php');
 require_once(INTERNAL_API_PATH . 'core/output.php');
 require_once(INTERNAL_API_PATH . 'dao/settings_dao.php');
+require_once(INTERNAL_API_PATH . 'core/cors.php');
 
 hesk_session_start();
 hesk_load_internal_api_database_functions();
diff --git a/internal-api/admin/calendar/index.php b/internal-api/admin/calendar/index.php
index 095a4b0a..a20b36b2 100644
--- a/internal-api/admin/calendar/index.php
+++ b/internal-api/admin/calendar/index.php
@@ -9,6 +9,7 @@ require_once(HESK_PATH . 'inc/posting_functions.inc.php');
 require_once(HESK_PATH . 'inc/admin_functions.inc.php');
 require_once(INTERNAL_API_PATH . 'core/output.php');
 require_once(INTERNAL_API_PATH . 'dao/calendar_dao.php');
+require_once(INTERNAL_API_PATH . 'core/cors.php');
 
 hesk_session_start();
 hesk_load_internal_api_database_functions();
diff --git a/internal-api/admin/knowledgebase/upload-attachment.php b/internal-api/admin/knowledgebase/upload-attachment.php
index 99aeca7b..9870d75d 100644
--- a/internal-api/admin/knowledgebase/upload-attachment.php
+++ b/internal-api/admin/knowledgebase/upload-attachment.php
@@ -8,6 +8,7 @@ require_once(HESK_PATH . 'inc/attachments.inc.php');
 require_once(HESK_PATH . 'inc/posting_functions.inc.php');
 require_once(INTERNAL_API_PATH . 'core/output.php');
 require_once(INTERNAL_API_PATH . 'dao/attachment_dao.php');
+require_once(INTERNAL_API_PATH . 'core/cors.php');
 
 hesk_load_internal_api_database_functions();
 hesk_dbConnect();
diff --git a/internal-api/admin/message-log/index.php b/internal-api/admin/message-log/index.php
index e5f5bff1..276d93dc 100644
--- a/internal-api/admin/message-log/index.php
+++ b/internal-api/admin/message-log/index.php
@@ -6,6 +6,7 @@ require_once(HESK_PATH . 'hesk_settings.inc.php');
 require_once(HESK_PATH . 'inc/common.inc.php');
 require_once(INTERNAL_API_PATH . 'core/output.php');
 require_once(INTERNAL_API_PATH . 'dao/message_log_dao.php');
+require_once(INTERNAL_API_PATH . 'core/cors.php');
 
 hesk_load_internal_api_database_functions();
 hesk_dbConnect();
diff --git a/internal-api/calendar/index.php b/internal-api/calendar/index.php
index 053d2f69..1ccc6011 100644
--- a/internal-api/calendar/index.php
+++ b/internal-api/calendar/index.php
@@ -8,6 +8,7 @@ require_once(HESK_PATH . 'inc/attachments.inc.php');
 require_once(HESK_PATH . 'inc/posting_functions.inc.php');
 require_once(INTERNAL_API_PATH . 'core/output.php');
 require_once(INTERNAL_API_PATH . 'dao/calendar_dao.php');
+require_once(INTERNAL_API_PATH . 'core/cors.php');
 
 hesk_session_start();
 hesk_load_internal_api_database_functions();
diff --git a/internal-api/core/cors.php b/internal-api/core/cors.php
new file mode 100644
index 00000000..a2ce75f0
--- /dev/null
+++ b/internal-api/core/cors.php
@@ -0,0 +1,3 @@
+<?php
+
+header('Access-Control-Allow-Origin', '*');
\ No newline at end of file
diff --git a/internal-api/ticket/delete-attachment.php b/internal-api/ticket/delete-attachment.php
index 68f063ff..eddb0f6c 100644
--- a/internal-api/ticket/delete-attachment.php
+++ b/internal-api/ticket/delete-attachment.php
@@ -8,6 +8,7 @@ require_once(HESK_PATH . 'inc/attachments.inc.php');
 require_once(HESK_PATH . 'inc/posting_functions.inc.php');
 require_once(INTERNAL_API_PATH . 'core/output.php');
 require_once(INTERNAL_API_PATH . 'dao/attachment_dao.php');
+require_once(INTERNAL_API_PATH . 'core/cors.php');
 
 hesk_load_internal_api_database_functions();
 hesk_dbConnect();
diff --git a/internal-api/ticket/upload-attachment.php b/internal-api/ticket/upload-attachment.php
index b98b982b..fe925162 100644
--- a/internal-api/ticket/upload-attachment.php
+++ b/internal-api/ticket/upload-attachment.php
@@ -8,6 +8,7 @@ require_once(HESK_PATH . 'inc/attachments.inc.php');
 require_once(HESK_PATH . 'inc/posting_functions.inc.php');
 require_once(INTERNAL_API_PATH . 'core/output.php');
 require_once(INTERNAL_API_PATH . 'dao/attachment_dao.php');
+require_once(INTERNAL_API_PATH . 'core/cors.php');
 
 hesk_load_internal_api_database_functions();
 hesk_dbConnect();