SOLVED: I contacted our hosting provider and they whitelisted mod_security rule

Mod_Security is a server-side web application firewall that is designed to block attempts of possibly malicious injections of various snippets into your website scripts; however, in some cases these blocks are false-positive.