I have a simple PHP script that I am attempting a cross-domain CORS request:
Access-Control-Allow-Headers does not allow * as accepted value, see the Mozilla Documentation here.
Access-Control-Allow-Headers
*
Instead of the asterisk, you should send the accepted headers (first X-Requested-With as the error says).
X-Requested-With