Your server appears to have a mod security rule in place that blocks html from form posts.
Mod security can be configured to interpret any html in a form post as an attempted hack. It appears this is what happens on your site. I'm not an expert at how that is configured, but your server administrator should be able to help you with it from here.
You will have to talk to your hosting support to see how to turn that off.