Opening the same question twice is more likely to annoy, than get a quicker suggestion/answer!

Your free non-realtime forum support doesn't run full-time nor have a maximum timescale for replies.
Meantime, why not ask on the broadleaf forum, seeing as it uses the relatively obscure/deprecated(?) java framework?
Obvious question: do you run mod_security? Check web logs, apache/nginx/varnish - whatever you use.