Hi there,
there is big chances that you are right, maybe you will need to use a function to make sure each fields contains valid data for XML / HTML
Try replacing & for & and if this work for ya, use the following function to prepare strings for XML / HTML data
Hope this will help ya!