the mod security addon is trying to prevent SQL injection by flagging the insert of javascript to the database. maybe if you had a dedicated hosting account you could have more control of the security settings. the only other workaround would be different hosting.