I don't know if this can be done in PHP; probably, but not simply. You would probably need to read the file as a text file, replace the & and other characters, re-store this new file on the server, then re-parse it as XML.
But the
original XML file is malformed and should be corrected.