# Problem when creating new email template

**URL:** https://forum.mautic.org/t/problem-when-creating-new-email-template/14959
**Category:** Product Support
**Created:** [June 25, 2020, 4:31pm UTC](https://forum.mautic.org/t/problem-when-creating-new-email-template/14959 "2020-06-25T16:31:03Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![pramirez](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/pramirez/32/1504_2.png) [@pramirez](https://forum.mautic.org/u/pramirez)
#### Post date: [June 25, 2020, 4:31pm UTC](https://forum.mautic.org/t/problem-when-creating-new-email-template/14959/1 "2020-06-25T16:31:03Z")

</div>

My Mautic version is: v2.16.2  
_My PHP version is 7.1.33_ :  
_My MySQL/MariaDB version is_ (delete as applicable): MariaDB 10.1

I’m trying to clone or create a new email template in Mautic. I add the name of the email and click on Apply.

_These errors are showing in the installer_ :

It gets frozen and I can’t do anything else.

_These errors are showing in the Apache log_ :

[Thu Jun 25 18:29:04.394947 2020] [:error] [pid 31798:tid 140177825523456] [client 82.159.35.81:42556] [client 82.159.35.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match “\<body\\b.{0,}?\\bbackground\\b” at ARGS:emailform[customHtml]. [file “/etc/modsecurity/07\_XSS\_XSS.conf”] [line “50”] [id “212300”] [rev “2”] [msg “WAF: Cross-site Scripting (XSS) Attack||inb.[redacted].com|F|2”] [data “Matched Data: \<body style=\x22margin: 0px; cursor: auto; overflow: visible;\x22 class=\x22ui-sortable\x22\>

 \<table data-section=\x221\x22 style=\x22width: 600;\x22 width=\x22600\x22 cellpadding=\x220\x22 cellspacing=\x220\x22\> \<div data-slot-container=\x221\x22 style=\x22min-height: 30px\x22 class=\x22ui-sortable\x22\> 
 \<img src=\x22https://inb.[redacted].com/media/images/e8059d3a971559e2a52b49430bd7ae42.jp…”] [severity “CRITICAL”] [tag “CWAF”] [tag “XSS”] [hostname “inb.[redacted].com”] [uri “/s/emails/new”] [unique\_id “XvTQ0FJivbUAAHw2qP8AAABD”], referer: [https://inb](https://inb).[redacted].com/s/emails/new

_These errors are showing in the upgrade\_log.txt file (located in the root of your Mautic instance when an upgrade has been attempted - ensure you remove or redact any sensitive data such as domain names in the file path)_ :

_My problem is_ : I can’t create or clone new email templates.

_Steps I have tried to fix the problem_ :

I tried to clear the cache.

---

<div class="post-metadata">

### Author: ![silavapi](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/silavapi/32/7424_2.png) [@silavapi](https://forum.mautic.org/u/silavapi)
#### Post date: [June 25, 2020, 4:55pm UTC](https://forum.mautic.org/t/problem-when-creating-new-email-template/14959/2 "2020-06-25T16:55:47Z")

</div>

> [@pramirez](#):
>
> ModSecurity: Access denied with code 403 (phase 2). Pattern match “\<body\b.{0,}?\bbackground\b” at ARGS:emailform[customHtml]. [file “/etc/modsecurity/07\_XSS\_XSS.conf”] [line “50”] [id “212300”] [rev “2”] [msg “WAF: Cross-site Scripting (XSS) Attack||inb.[redacted].com|F|2”] [data “Matched Data: \<body style=\x22margin: 0px; cursor: auto; overflow: visible;\x22 class=\x22ui-sortable\x22\>

This suggests to me that your host has some mod\_security rules which are being triggered. Please contact your hosting provider to troubleshoot it with them!
