Index: /CKEditor/trunk/CHANGES.html
===================================================================
--- /CKEditor/trunk/CHANGES.html	(revision 5044)
+++ /CKEditor/trunk/CHANGES.html	(revision 5045)
@@ -82,4 +82,5 @@
 		<li><a href="http://dev.fckeditor.net/ticket/4763">#4763</a> : Press Enter key with text selected will not delete the text.</li>
 		<li><a href="http://dev.fckeditor.net/ticket/4716">#4716</a> : [IE] Cursor remain blinking in editor when focus is moved to any button that following.</li>
+		<li><a href="http://dev.fckeditor.net/ticket/5096">#5096</a> : Simple ampersand attribute value doesn't work for more than once occurance.</li>
 		<li>Updated the following language files:<ul>
 			<li><a href="http://dev.fckeditor.net/ticket/5006">#5006</a> : Dutch;</li>
Index: /CKEditor/trunk/_source/plugins/htmlwriter/plugin.js
===================================================================
--- /CKEditor/trunk/_source/plugins/htmlwriter/plugin.js	(revision 5044)
+++ /CKEditor/trunk/_source/plugins/htmlwriter/plugin.js	(revision 5045)
@@ -172,10 +172,11 @@
 		attribute : function( attName, attValue )
 		{
-			if ( this.forceSimpleAmpersand )
-				attValue = attValue.replace( /&amp;/, '&' );
-
-			// Browsers don't always escape quote in attribute values. (#4683)
+
 			if ( typeof attValue == 'string' )
+			{
+				this.forceSimpleAmpersand && ( attValue = attValue.replace( /&amp;/g, '&' ) );
+				// Browsers don't always escape quote in attribute values. (#4683)
 				attValue = attValue.replace( /"/g, '&quot;' )
+			}
 
 			this._.output.push( ' ', attName, '="', attValue, '"' );