How do I fix CORS errors in my Express API?

My React frontend at localhost:3000 is calling my Express backend at localhost:5000 and I keep getting:

Access to fetch at "http://localhost:5000/api/data" from origin "http://localhost:3000" has been blocked by CORS policy

I have installed the cors package but the error persists. How do I configure CORS correctly in Express?