Index: wp-includes/functions.php
===================================================================
--- wp-includes/functions.php	(revision 3918)
+++ wp-includes/functions.php	(working copy)
@@ -641,7 +641,7 @@
 	foreach($qs as $k => $v) {
 		if ( $v != '' ) {
 			if ( $ret != '' )
-				$ret .= '&';
+				$ret .= '&amp;';
 			$ret .= "$k=$v";
 		}
 	}
Index: wp-includes/script-loader.php
===================================================================
--- wp-includes/script-loader.php	(revision 3918)
+++ wp-includes/script-loader.php	(working copy)
@@ -62,7 +62,7 @@
 			if ( !in_array($handle, $this->printed) && isset($this->scripts[$handle]) ) {
 				$ver = $this->scripts[$handle]->ver ? $this->scripts[$handle]->ver : $wp_db_version;
 				if ( isset($this->args[$handle]) )
-					$ver .= '&' . $this->args[$handle];
+					$ver .= '&amp;' . $this->args[$handle];
 				$src = 0 === strpos($this->scripts[$handle]->src, 'http://') ? $this->scripts[$handle]->src : get_settings( 'siteurl' ) . $this->scripts[$handle]->src;
 				echo "<script type='text/javascript' src='$src?ver=$ver'></script>\n";
 				$this->printed[] = $handle;

