The issue is that you have not been given XML and the parser legitimately gets in a mess as it sees data that is not legal.. The XML specification says
The ampersand character (&) and the left angle bracket (<) must not appear in their literal form, except when used as markup delimiters, or within a comment, a processing instruction, or a CDATA section. If they are needed elsewhere, they must be escaped using either numeric character references or the strings
"&"
and"<"
respectively.
Thus you have to alter the XML and replace & by &