It's not actually returning 5 values, it's returning 4. The ampersand is being converted to amp; for XML. It looks like 5 because you are using ; for a delimiter. If you change to a pipe, you'll see it is only 4 values. If 2017 or above, I'd follow Jeff's advice
It would be real friendly of you to explain how your issue has been fixed so that others can figure it out when they read the multiple suggestions on this post.