XML parsing: line 1, character 23, illegal name character

The & is a reserved/special character in XML. It should be &

I'll even add that XML parsing: line 1, character 23, illegal name character is quite clear if you know that SQL counts from 1: then the 23rd character is the &.

You need to change & to &