Blog posts with & character on their title are not correctly displayed in Blog-List and blogpostlist-Macro

Blog posts with & character in their title are not correctly displayed in the blog page (/bin/Blog/) with calendar layout and when using the blogpostlist-Macro on other pages.

How to reproduce the bug:

• Create a blog post with an & character in the title (f.ex. Weather & Climate)
• In the blog page (with calender layout) and any blogpostlist-macro-instances the title will be displayed like:

{{html clean="false" wiki="false"}}Weather & Climate{{/html}}

The problem is very similar to two old resolved Issues and produces the same output:
https://jira.xwiki.org/browse/BLOG-217
https://jira.xwiki.org/browse/BLOG-186

The issue is present in XWiki Debian 16.10.7 & 16.10.8 on all browsers.