CORS issue on http://states-and-cities.com

I tried making an AJAX get call to the state endpoint, but got this in console instead - "Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://states-and-cities.com/api/v1/states. (Reason: CORS header 'Access-Control-Allow-Origin' missing)"
