The forbidden characters replacement is explained in our documentation. By default, if there are multiple forbidden characters, they are replaced with one replacement character as set in the Settings -> URLs & SEO. If you wish to have each forbidden character replaced individually, add the following key to your administration application's web.config:
< add key="CMSLimitUrlReplacements" value="false" / >